Tinubu Signs NIMC Act 2026, Expands Nigeria’s Digital Identity System

President Bola Ahmed Tinubu has signed the National Identity Management Commission (NIMC)  Act 2026 into law, introducing sweeping reforms aimed at strengthening Nigeria’s digital identity ecosystem. The legislation replaces the 2007 NIMC Act and grants the commission broader authority to manage and regulate the nation’s identity infrastructure.

The National Identity Management Commission announced the development in a statement issued by its Head of Corporate Communications, Kayode Adegoke. According to the agency, the new law establishes NIMC as the country’s Root Certification Authority, giving it oversight of Nigeria’s National Public Key Infrastructure and Digital Public Infrastructure.

With the enactment of the legislation, the commission will serve as the central institution responsible for digital identity verification, electronic authentication, digital certificates, encryption services, and trust frameworks required for secure online transactions. The move is expected to strengthen confidence in digital services across both government and private sectors.

NIMC described the Act as a major milestone in Nigeria’s digital transformation journey. The commission said the updated legal framework would improve cybersecurity, protect personal information, support financial inclusion, and encourage the growth of the digital economy.

The commission explained that the previous law had remained in force for almost twenty years despite significant technological advancements and increasing demand for secure digital services. The rise of electronic commerce, online government services, cybersecurity threats, and data protection requirements made it necessary to introduce a more modern identity management framework.

Under the new legislation, the National Identification Number (NIN) remains the country’s primary identity credential. The law reinforces the “One Person, One Identity” policy while promoting seamless verification and authentication processes across various institutions and service platforms.

The Act also provides stronger safeguards for personal data in line with the Nigeria Data Protection Act and internationally accepted privacy standards. In addition, stricter sanctions have been introduced to address identity-related offences, including multiple registrations, identity theft, impersonation, and fraud.

Another key provision of the law is the formal recognition of both physical and digital identity credentials, all of which will remain linked to an individual’s National Identification Number. The legislation also includes measures to ensure that vulnerable and underserved populations, including persons without permanent residences, can access identity registration services.

According to NIMC, Nigerians are expected to benefit from quicker identity verification processes, improved data security, enhanced interoperability among institutions, and reduced cases of identity fraud. The commission added that the law would also support greater financial inclusion, improve public service delivery, strengthen cybersecurity, and enhance the ease of doing business.

The amendment of the NIMC Act was one of the important conditions attached to Nigeria’s access to the World Bank’s 430 million dollar Identity for Development project. The World Bank had previously stated that updating the legal framework would promote a more inclusive and non-discriminatory identity system while supporting the country’s digital development goals.

The international lender also increased Nigeria’s enrolment target under the programme, raising the expected number of National Identification Number registrations from 148 million to 180 million people nationwide.