President Bola Ahmed Tinubu has signed the National Identity Management Commission (NIMC) Act, 2026 into law, repealing the 2007 legislation and introducing a new legal framework designed to establish a secure, interoperable, and inclusive digital identity system for Nigeria.
The new law significantly expands the mandate of the National Identity Management Commission (NIMC) by designating it as the Root Certification Authority for Nigeria’s National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI). The move positions the Commission at the centre of the country’s digital identity, authentication, and electronic trust ecosystem.
The legislation also reinforces the National Identification Number (NIN) as Nigeria’s foundational identity credential under the principle of “One Person, One Identity.” It empowers NIMC to facilitate secure and seamless exchange of identity data among government agencies, financial institutions, and private-sector organisations.
The Federal Government said the reforms are expected to strengthen digital governance, improve public service delivery, enhance cybersecurity, and support Nigeria’s ambition of building a $1 trillion economy through technology-driven growth.
In a statement issued on Friday, NIMC described the new legislation as the most comprehensive reform of Nigeria’s identity management framework since the Commission was established nearly two decades ago.
According to the Commission, the rapid expansion of digital services, e-governance, electronic commerce, increasing data protection requirements, and evolving cybersecurity threats made it necessary to replace the 2007 Act with a more modern legal framework aligned with international best practices.
Under the new Act, NIMC will establish and manage Nigeria’s National Public Key Infrastructure and Digital Public Infrastructure, providing trusted digital authentication systems, electronic signatures, digital certificates, encryption services, and identity verification mechanisms aimed at enhancing confidence in digital transactions and online services.
The legislation also introduces stronger safeguards for personal data and privacy in line with the Nigeria Data Protection Act and global standards. It prescribes stiffer penalties for offences such as multiple identity registrations, identity theft, impersonation, and other identity-related crimes.
As part of efforts to promote inclusion, the Act introduces a new identification framework for vulnerable groups and mandates special measures to facilitate the enrolment of underserved populations, including individuals without permanent residences.
The law further recognises both physical and digital identity credentials, all linked securely to an individual’s National Identification Number, thereby expanding opportunities for digital transactions and improving access to public and private services.
NIMC said implementation of the new framework would enable faster and more secure identity verification, promote financial and digital inclusion, improve interoperability across government and private-sector platforms, and enhance the ease of doing business in Nigeria.
The Commission expressed appreciation to President Tinubu for signing the legislation, describing the move as a demonstration of visionary leadership that would strengthen the protection of citizens’ data, improve cybersecurity, expand access to essential services, and provide a solid foundation for the country’s digital economy and long-term national development.
NIMC also commended the leadership of the National Assembly, the Federal Ministry of Interior, development partners, and other stakeholders for their contributions to the passage of the legislation.
The Commission said it would issue the necessary regulations and implementation guidelines in the coming months while engaging relevant government agencies, private-sector organisations, and development partners to ensure a smooth transition to the new legal framework.
