President Bola Tinubu has signed the National Identity Management Commission (NIMC) Act 2026 into law, ushering in a new era for Nigeria’s digital identity system with tougher penalties for identity fraud, stronger data protection measures, and a mandatory National Identification Number (NIN) for a broad range of public and private transactions.
The landmark legislation replaces the nearly two-decade-old legal framework governing Nigeria’s identity management system with a modern, technology-driven structure designed to strengthen national security, improve service delivery, and support the country’s digital economy.
Announcing the development through his verified X account on Friday, President Tinubu described the new Act as a major step toward building a secure and globally competitive digital identity ecosystem capable of supporting Nigeria’s ambition of becoming a $1 trillion economy. For nearly twenty years, Nigeria’s identity system operated under a law written for a different era. That era is over, the President declared.
One of the key provisions of the new law designates the National Identity Management Commission (NIMC) as the Root Certification Authority for Nigeria’s National Public Key Infrastructure and Digital Public Infrastructure.
According to Tinubu, the commission will now serve as the nation’s trusted authority for digital verification, overseeing secure digital signatures, authenticated identities, and protected online transactions.
He said the move would lay the foundation for a more reliable digital economy capable of supporting financial services, e-governance, and private sector innovation.
The President emphasized that the legislation aligns Nigeria’s identity management framework with the Nigerian Data Protection Act, providing stronger legal safeguards for citizens’ personal information.
Under the Act, personal data cannot be accessed without an individual’s consent except through lawful procedures. Information collected for one purpose cannot be used for another without proper authorization.
Tinubu stressed that Nigerians’ personal information must no longer be handled carelessly, adding that the law guarantees citizens greater privacy and data security.
The new law significantly expands the use of the National Identification Number (NIN) across both government and private sector services.
With the implementation of the Act, Nigerians will be required to present their NIN for numerous transactions, including:
- Passport applications
- Voter registration
- Opening and operating bank accounts
- Land registration and property transactions
- Telecommunications services
- Pension administration
- Insurance services
- Tax payments
- Consumer credit applications
- Access to government programmes and public services
Describing the reform, Tinubu declared: One person. One identity. One number.
The legislation also introduces the General Multipurpose Card, a unified identity credential expected to serve multiple verification purposes across various sectors.
The President explained that the card would simplify identity verification for citizens while improving efficiency across government institutions and private organisations.
Tinubu said the law contains specific measures to ensure that vulnerable Nigerians, including those without permanent homes or formal addresses, are not excluded from the national identity system.
The Act establishes a dedicated identifier system for underserved populations and mandates special enrolment programmes aimed at improving financial inclusion and access to essential government services.
The President also assured Nigerians living abroad that the legislation guarantees easier access to identity registration and verification services from anywhere in the world.
According to him, the reforms are intended to ensure that every Nigerian, regardless of location or social status, can participate fully in the country’s growing digital economy.
The Act also restructures the governing board of the National Identity Management Commission by bringing together representatives from 14 strategic government institutions.
Among the agencies represented are:
- Independent National Electoral Commission (INEC)
- Nigeria Police Force
- Department of State Services (DSS)
- Economic and Financial Crimes Commission (EFCC)
- Central Bank of Nigeria (CBN)
- National Population Commission (NPC)
- Office of the National Security Adviser (ONSA)
The reconstituted board is expected to strengthen collaboration among government institutions involved in identity management, security, and public administration.
Perhaps the most far-reaching aspect of the legislation is the introduction of much stiffer penalties for identity-related crimes.
Under the new Act:
- Individuals found guilty of unauthorized access to identity systems, impersonation, or multiple registrations face a minimum of five years imprisonment.
- Corporate organisations convicted of identity-related offences may be fined up to ₦20 million.
Tinubu stated that penalties have been increased by as much as 100 times compared to the previous law.
He also disclosed that the Commission now possesses court-authorised investigative powers, enabling it to search premises, seize evidence, decrypt digital information, and arrest suspects involved in identity-related offences.
“There will be no tolerance for identity fraud,” the President warned.
Tinubu Commends Stakeholders
The President expressed appreciation to the National Assembly, the Ministry of Interior, the management and staff of NIMC, development partners, and other stakeholders who contributed to the passage of the legislation.
He described the new law as another milestone under the administration’s Renewed Hope Agenda, saying it would promote national security, financial inclusion, improved governance, and economic development through a trusted digital identity system.
