President Bola Ahmed Tinubu has signed the National Identity Management Commission (NIMC) Act 2026 into law, ushering in a new legal framework aimed at strengthening Nigeria’s digital identity system, improving national security and expanding access to public and private sector services. The new law repeals the 2007 NIMC Act, replacing the nearly two-decade-old legislation with provisions designed to meet the demands of a modern digital economy and enhance the protection of citizens’ personal data. Speaking after signing the bill at the Presidential Villa in Abuja on Friday, Tinubu said the Act would reposition Nigeria’s identity management system to support economic growth while ensuring that citizens’ personal information is better protected.
Under the new law, the National Identity Management Commission becomes the country’s Root Certification Authority for the National Public Key Infrastructure and Digital Public Infrastructure, giving it a central role in securing digital identities, electronic signatures and online transactions. The legislation also reinforces the National Identification Number (NIN) as the country’s primary means of identity verification. The NIN will be required for a wide range of transactions, including passport applications, voter registration, banking services, tax payments, pensions, insurance, telecommunications, consumer credit and access to government services.
In addition, the Act introduces a General Multipurpose Card that will serve as a single identity credential for various services across the country. To improve inclusion, the law provides special measures for enrolling vulnerable and underserved Nigerians, including those without permanent residences, while making identity services more accessible to Nigerians living abroad. The Act also prescribes stiffer penalties for identity-related offences. Individuals convicted of offences such as identity theft, impersonation, multiple registration and unauthorised access to identity data now face a minimum of five years imprisonment, while corporate organisations may be fined up to ₦20 million.
Minister of Interior, Olubunmi Tunji-Ojo, described the legislation as a major milestone in the Federal Government’s ongoing reforms, saying the integration of Nigeria’s identity database with other security platforms has already improved intelligence gathering and law enforcement. According to him, the interconnected system recently aided the arrest of seven suspected Boko Haram and ISWAP commanders at Katsina Airport after they returned from the Hajj pilgrimage. Director-General of NIMC, Abisoye Coker-Odusote, said the new law provides a modern legal framework for Nigeria’s identity management system and will strengthen digital trust, cybersecurity, financial inclusion and efficient service delivery. The Federal Government expressed confidence that the Act would deepen public trust in Nigeria’s identity system while supporting the country’s broader digital transformation agenda.
