President Bola Ahmed Tinubu has signed into law the National Identity Management Commission (NIMC) Act, 2026, giving the Commission sweeping new powers to manage Nigeria’s digital identity infrastructure in what officials have described as the most far-reaching reform of the country’s identity management system since the establishment of NIMC nearly two decades ago.
The legislation repeals the NIMC Act, 2007 and substitutes it with a new legal framework that moves the Commission from being a national identification enrolment agency to the country’s central authority for safe digital identity, authentication and electronic trust services.
The reform places NIMC at the center of Nigeria’s digital transformation agenda by making it the Root Certification Authority for Nigeria’s National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI). This role confers on the Commission the statutory responsibility to secure digital identities, electronic authentication, encryption, digital certificates and trusted online transactions across government and the private sector.
The move is likely to speed up the Federal Government’s drive to develop a safe digital economy, while pushing ahead President Tinubu’s vision of growing Nigeria into a $1 trillion economy through technology, innovation and enhanced public service delivery.
The Commission said the new law provides the legal basis for the secure and seamless interchange of identity data among Ministries, Departments and Agencies (MDAs), financial institutions, telecommunications providers and other permitted entities.
It also gives the institutional framework to promote cyber security, enhance e-governance and deepen confidence in Nigeria’s growing digital economy.
The Commission said the change was needed because the legal framework adopted in 2007 could no longer sufficiently accommodate the rapid rise of electronic commerce, digital banking, online government services, data protection standards and increasingly sophisticated cyber threats.
“The new Act places Nigeria’s identity management system in the global arena with the best practices and technologies of the moment and creates a trusted digital identity ecosystem for its citizens and businesses,” NIMC stated.
A major feature of the law reinforces the National Identification Number (NIN) as the principal identity credential in Nigeria under the “One Person, One Identity” policy, and as the basis for identity verification across public and commercial entities.
The Act also offers enhanced safeguards for personal information harmonising identity management with the Nigeria Data Protection Act (NDPA) and internationally acknowledged privacy standards.
Another key development is that the NIMC has the mandate to establish and maintain the Nigeria’s National Public Key Infrastructure for the use of secure digital signatures, encryption technologies, identity authentication and electronic certification that supports online transactions.
The development will boost confidence in digital payments, financial services, e-commerce, taxation, healthcare, education and other technology-enabled public services, officials said. Primary & Secondary Education (K-12)
The Act validates physical and digital identification credentials tied to an individual’s National Identification Number, enabling Nigerians to use secure digital identity across numerous platforms.
It also launches the General Multipurpose Card, a card that will serve to facilitate the identification of the user for a wide range of public and private services under the theme “One Card, Multiple Possibilities”.
To promote inclusion, the law establishes a specialised identity framework for vulnerable and disadvantaged populations, such as people without permanent residencies, to allow for broader access to financial services and government initiatives.
The Act significantly intensifies Nigeria’s fight against identity-related crimes with tougher penalties for multiple registration, identity theft, impersonation and other fraudulent actions.
The law’s implementation will give Nigerians speedier identification verification, tighter protection of personal information, increased cybersecurity, wider access to digital services and greater confidence in electronic transactions, NIMC said.
The Act will also improve interoperability between government agencies, financial institutions and private organisations, eliminating duplication and enhancing the efficiency of service delivery, the Commission noted.
Beyond identity management, researchers say the reforms might improve Nigeria’s investment climate by providing the trusted digital infrastructure needed for fintech expansion, e-commerce, digital lending and cross-sector innovation.
NIMC described the President’s assent as a defining moment for Nigeria’s digital transformation, noting that the law provides the institutional architecture to promote innovation, economic growth and digital governance.
The Commission also thanked the leadership of the National Assembly, the Federal Ministry of Interior, development partners and stakeholders for the roles they played in the passage of the legislation.
NIMC said that the implementation guidelines and subsidiary rules are expected to be published in the coming months to ensure a smooth transition into the new legal environment and the full implementation of the Act.
With the law now in place, Nigeria has made a major step in the direction of an integrated digital identity ecosystem, helping to facilitate secure transactions, improve governance, broaden financial inclusion and promote long-term economic growth.
About the Author
