NIMC Act 2026 Makes Agency Nigeria’s Digital ID Authority

In Short

• President Bola Tinubu has signed the National Identity Management Commission (NIMC) Act 2026 into law.
• The Act replaces the 2007 NIMC law and expands the commission’s role in Nigeria’s digital identity system.
• It positions NIMC as a national trust and certification body for identity authentication and secure digital services.

What Happened

The NIMC Act 2026 is now law, and it gives the National Identity Management Commission stronger powers to oversee Nigeria’s digital identity infrastructure. NIMC says the update modernises the legal framework after nearly two decades of changes in online services, cybersecurity risks, and data protection expectations.

A key provision names NIMC as the Root Certification Authority for Nigeria’s National Public Key Infrastructure, also called PKI. PKI is the system that issues and manages digital certificates, which are like digital ID cards for computers and organisations. These certificates help services confirm who is signing a document or logging in, and they support encryption, which is the scrambling of data so only the right parties can read it.

NIMC also says the Act makes it the trusted national authority for digital identity authentication, electronic trust services, and secure identity verification across both government and private sector platforms. It further empowers the commission to support interoperable data exchange, which means different organisations can share and confirm identity data using compatible standards.

The law keeps the National Identification Number, or NIN, as the foundational identity credential under a “One Person, One Identity” approach. It also tightens penalties for multiple registrations and strengthens measures against identity theft and impersonation.

Why It Matters

For fintechs, banks, telecoms, and online services, the Act could reshape how identity checks work at scale. Stronger PKI and a clearer legal mandate may make it easier to roll out secure logins, e-signatures, and verified digital onboarding, while reducing fraud.

The Act also references stronger personal data protections aligned with the Nigeria Data Protection Act and international privacy standards. That raises the compliance bar for organisations that rely on NIN verification, digital KYC (know your customer checks), and identity-linked services.

NIMC says the law includes measures to improve enrolment for vulnerable and underserved populations, including people without permanent residences. If implementation matches the intent, that could expand access to digital public services and financial inclusion tools that depend on verified identity.