President Bola Ahmed Tinubu has signed into law the National Identity Management Commission (NIMC) Act, 2026, replacing the 2007 legislation that established the commission.
Tinubu assented to the bill at the State House on Friday.
Confirming the development, the President’s Special Adviser on Information and Strategy, Bayo Onanuga, wrote in a brief statement on X: “President Bola Ahmed Tinubu assented to the National Identity Management Commission (NIMC) Act 2026 in the State House on Friday.”
The NIMC described the new law as a landmark reform that modernises Nigeria’s identity management system and lays the foundation for a secure, inclusive and digitally driven economy.
According to the commission, the Act repeals the National Identity Management Commission Act of 2007 and introduces a modern legal framework designed to align Nigeria’s identity ecosystem with global best practices, emerging technologies and the demands of a rapidly evolving digital economy.
A major innovation under the new law is the designation of NIMC as the Root Certification Authority for Nigeria’s National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI), making it the country’s trusted authority for secure digital identity, authentication and electronic trust services across government and private-sector platforms.
“The Act further empowers NIMC to ensure secure, interoperable and seamless data exchange among all public and private entities, laying the legal and institutional foundation for a trusted digital economy,” the commission said.
It added that the legislation supports President Tinubu’s Renewed Hope Agenda by accelerating digital transformation, strengthening national security, expanding financial and social inclusion, improving public service delivery and driving innovation toward the administration’s goal of building a one-trillion-dollar economy.
Key provisions
NIMC said the Act updates Nigeria’s identity management framework to address the rapid expansion of digital services and emerging cybersecurity threats while strengthening digital trust and protecting citizens’ personal data.
The law reinforces NIMC’s role as the statutory authority responsible for Nigeria’s national identity system and strengthens the “one person, one identity” principle through the National Identification Number (NIN). It also enables seamless identity verification and authentication across public and private-sector platforms.
The commission said the Act places NIMC at the centre of Nigeria’s digital trust architecture by assigning it responsibility for the National Public Key Infrastructure and Digital Public Infrastructure.
Other notable provisions include stronger data protection and privacy safeguards, enhanced cybersecurity measures, secure digital identity and interoperability, provisions for a general multipurpose identity card, greater inclusion of vulnerable groups and tougher anti-fraud mechanisms.
Expected benefits
According to the commission, implementation of the Act will create a secure and interoperable digital identity ecosystem that will improve access to public and private services while boosting confidence in digital transactions.
Nigerians are expected to benefit from easier access to identity services, including those living in the diaspora, stronger protection of personal data, faster and more secure identity verification, improved cybersecurity and expanded access to essential government and financial services.
NIMC said the reform strengthens the legal foundation for Nigeria’s Digital Public Infrastructure by formally designating the commission as the Root Certification Authority for both the National Public Key Infrastructure and the Digital Public Infrastructure.
The commission added that the new law will enhance data security, facilitate trusted digital identity and authentication services, enable seamless data sharing across institutions and support the Federal Government’s broader digital economy agenda.
