Nigeria has commenced the implementation of the newly enacted National Identity Management Commission (NIMC) Act 2026, ushering in a major overhaul of the country’s identity management system with a stronger focus on digital identity, enhanced data protection and stricter penalties for identity-related offences.
The new legislation, which repeals the 2007 NIMC Act, establishes digital identity as a key component of Nigeria’s Digital Public Infrastructure (DPI), allowing citizens to authenticate their identities through smartphone applications, QR codes, biometric verification, digital wallets and other electronic credentials rather than relying primarily on physical identity cards.
Under the law, the National Identity Management Commission (NIMC) has been designated as Nigeria’s Root Certification Authority, giving it responsibility for managing the country’s Public Key Infrastructure (PKI), digital certificates and authentication systems that support secure electronic transactions across both government and private sector platforms.
The Act also significantly strengthens measures against identity fraud by introducing tougher sanctions for offences such as impersonation, multiple registrations and unauthorised access to identity information. Companies found guilty of identity-related violations may face fines running into millions of naira, while individuals convicted of serious offences could receive prison terms.
In addition, the law aligns Nigeria’s identity management framework with the Nigeria Data Protection Act by requiring NIMC to clearly inform citizens how their personal information will be collected, stored, processed and shared during enrolment. It also imposes greater accountability for the protection of identity data.
Another key reform is the introduction of a General Multipurpose Card intended to serve as a unified identity credential for accessing multiple public and private sector services, reducing the need for several government-issued identification documents.
The legislation further expands NIMC’s enforcement powers while strengthening collaboration among government institutions through a reconstituted governing board comprising representatives of key security, financial and public sector agencies.
President Bola Ahmed Tinubu signed the re-enacted NIMC Act into law on June 26, describing it as a critical step toward accelerating Nigeria’s digital transformation, improving national security, expanding financial inclusion and enhancing public service delivery.
Analysts say the reforms are expected to strengthen trust in digital transactions, streamline identity verification across sectors and provide a more secure legal framework for Nigeria’s rapidly expanding digital economy, although successful implementation will depend on robust cybersecurity safeguards and effective oversight.
