Tinubu signs new NIMC Act to strengthen identity management 

President Bola Tinubu on Friday signed the new National Identity Management Commission (NIMC) Act, 2026, aimed at strengthening security around identity management.

President Tinubu, while signing the Act at the presidential Villa, Abuja said the landmark legislation marks a transformative milestone in of the National Identity Management Commission (NIMC).

The new Act repeals and replaces the NIMC Act of 2007, while also  establishinga modern, forward-looking legal framework that aligns Nigeria’s identity ecosystem with global best practices, emerging technologies and the demands of a rapidly evolving digital economy.

Under the new law, Nigerians l expect wider, easier and more convenient access to identity services, including for Nigerians in the Diaspora.
The new Act also support stronger protection of personal data and privacy, while also enhancing cybersecurity and greater confidence in digital transactions.

Other features include faster, safer and more secure identity verification and authentication.

The new Act designated the NIMC as the “Root Certification Authority for Nigeria’s National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI)”, thereby establishing the Commission as the nation’s trusted authority responsible for underpinning secure digital identity, authentication and electronic trust services across government and private-sector digital platforms.

The Act further empowers NIMC to ensure secure, interoperable and seamless data exchange among all public and private entities, laying the legal and institutional foundation for a trusted digital economy.

BusinessDay gathered that the Act will help in accelerating digital transformation, strengthening national security, expanding financial and social inclusion, improving public service delivery and supporting the development of a secure Digital Public Infrastructure capable of driving innovation, economic growth and Nigeria’s aspiration of becoming a one-trillion-dollar economy.

” It will also enhance governance, electronic commerce, data protection requirements and evolving cybersecurity

The rapid expansion of digital services, threats created an urgent need for a more robust and contemporary legal framework

The NIMC Act 2026 is seen as a  response to these realities by modernising Nigeria’s identity management framework, strengthening digital trust, protecting citizens’ personal data, entrancing cybersecurity and positioning the country to fully harness the opportunities presented by the global digital economy.

The Act strengthens NIMC’s role as the statutory authority responsible for the national identi the country’s foundational identity credential, reinforces the principle of “One Person. One management system in Nigeria. It firmly establishes the National Identification Number (NIN) क Identity.” and enables seamless identity verification and authentication across government and private-sector platforms.

Importantly, the Act positions NIMC at the centre of Nigeria’s digital trust architecture by assigning it strategic responsibility for the National Public Key Infrastructure and Digital Public Infrastructure.

Amongst the other major highlights are the robust data protection and privacy, as it Introduces stronger safeguards for personal data in alignment with the Nigeria Data Protection Act (NDPA) and international best practices, ensuring that Nigerians’ personal information is processed, stored and protected in accordance with globally accepted privacy standards.

With the Act designating the NIMC as the Root Certification Authority for Nigeria’s National Public Key Infrastructure and Digital Public Infrastructure, it has helped in establishing the Commission as the nation’s trusted authority responsible for secure digital identity, authentication and electronic trust services. It empowers NIMC to establish, manage and maintain the National Public Key Infrastructure and Digital Public Infrastructure, providing trusted authentication, encryption, digital signatures, digital certificates and identity verification frameworks that strengthen confidence in digital transactions and online services across government and private-sector platforms

It also secure Digital Identity and Interoperability: The Act empowers NIMC to ensure secure. interoperable and seamless data exchange among Ministries, Departments and Agencies (MDAs), private organisations and other authorised entities. This will enable trusted digital interactions, improve service delivery, strengthen cybersecurity and provide the secure digital backbone required for Nigeria’s Digital Public Infrastructure and digital economy.

The Act also positions the “NIMC General Multipurpose Card” as a versatile identity credential for nationwide identity verification under the theme: “One Card, Multiple Possibilities.”

Inclusivity for Vulnerable Groups: Introduces an innovative Identifier system for vulnerable persons and mandates special measures to facilitate the enrolment of underserved populations, including, persons without permanent residences, ensuring that no one is left behind.

The stronger anti-fraud measures also prescribes stringent penalties for multiple registrations and strengthens measures to combat identity theft, impersonation and other identity related offences.

The new law also  formally recognises both physical and digital identity credentials, all securely linked to an individual’s National Identification Number (NIN), thereby supporting secure digital transactions and service delivery.

The implementation of the Act will deliver significant benefits by creating a trusted, secure and interoperable digital identity ecosystem that enables seamless access to services across both the public and private sectors while strengthening electronic trust across Nigeria’s digital economy.