NIMC Act 2026 Makes NIN Central to ID Verification

In Short

Nigeria has passed the NIMC Act 2026, a new law that updates how identity is managed and verified.

What Happened

The NIMC Act 2026 was signed this week by President Bola Ahmed Tinubu. It replaces the older NIMC Act of 2007 and updates Nigeria’s identity framework after nearly two decades.

Under the new NIMC Act 2026, the National Identity Management Commission is positioned as the country’s main authority for identity management and identity verification. In plain terms, this makes NIMC the place that sets the rules for how organisations confirm that someone is who they say they are.

The Act also assigns NIMC a bigger technical role in national digital trust systems. It names the agency as the Root Certification Authority for parts of Nigeria’s Public Key Infrastructure, or PKI, which is the digital system that proves a document or transaction is authentic, like a tamper-proof stamp. It also ties into Nigeria’s broader Digital Public Infrastructure, or DPI, which is shared government-backed digital rails, like common ID and payment systems.

Separately, NIMC has been working on privacy readiness. The commission recently partnered with the Nigeria Data Protection Commission to train 4,000 staff on data protection and privacy, aligning with the Nigeria Data Protection Act.

Why It Matters

The biggest shift for citizens and businesses is the expanded role of the National Identity Number. The Act makes the NIN a multipurpose identifier across many services.

Organisations may now be expected to request NINs for processes like opening and operating bank accounts, telecom services such as SIM registration, passport applications, voter registration, tax payments, pensions, insurance, land transactions, and consumer credit.

For fintechs, telcos, lenders, and KYC teams, this could standardise verification workflows. KYC means “know your customer”, the checks companies run to prevent fraud and meet compliance rules. It also raises the stakes for secure data handling, since more everyday services will rely on one ID number.