Why Tinubu Signs New NIMC Law To Establish Single Digital Identity Framework
President Bola Tinubu has signed the National Identity Management Commission (NIMC) Act, 2026 into law, marking a major milestone in Nigeria’s digital transformation agenda with the establishment of a comprehensive legal framework for a secure, inclusive and interoperable national digital identity system.
The new legislation repeals the National Identity Management Commission Act of 2007 and introduces sweeping reforms designed to position Nigeria’s identity management architecture in line with global best practices while strengthening digital governance, cybersecurity and service delivery.
A key feature of the Act is the designation of the National Identity Management Commission (NIMC) as Nigeria’s Root Certification Authority for the National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI). This places the Commission at the heart of the country’s digital identity ecosystem, giving it responsibility for trusted authentication services, digital signatures, digital certificates, encryption and secure identity verification.
The law also reinforces the National Identification Number (NIN) as Nigeria’s foundational identity credential under the principle of “One Person, One Identity,” while empowering NIMC to facilitate seamless and secure data exchange among government agencies, financial institutions and private-sector organisations.
According to NIMC, the reforms are intended to improve public service delivery, strengthen cybersecurity, promote digital and financial inclusion, enhance the ease of doing business and support the Federal Government’s ambition of building a one-trillion-dollar economy driven by technology and innovation.
In a statement issued on Friday, the Commission described the legislation as the most significant reform of Nigeria’s identity management system since NIMC was established nearly 20 years ago.
It explained that the rapid expansion of digital services, electronic commerce, e-governance, evolving cyber threats and growing data protection requirements necessitated a modern legal framework capable of supporting Nigeria’s digital economy.
Under the new Act, NIMC will oversee the establishment and management of Nigeria’s National Public Key Infrastructure and Digital Public Infrastructure, providing secure authentication systems that enhance trust in digital transactions and online services.
The legislation also introduces stronger safeguards for personal data and privacy in line with the Nigeria Data Protection Act and international standards. It prescribes tougher sanctions against identity-related offences, including multiple registrations, identity theft, impersonation and other fraudulent practices.
To deepen inclusion, the law creates an innovative identification system for vulnerable groups and mandates special measures to facilitate the enrolment of underserved populations, including individuals without permanent residences.
It further recognises both physical and digital identity credentials, all securely linked to an individual’s National Identification Number, thereby expanding opportunities for digital transactions and improving access to public and private services.
NIMC said the implementation of the new framework would enable faster and more secure identity verification, improved interoperability across government and private-sector platforms, broader financial and digital inclusion, and greater efficiency in service delivery.
The Commission commended President Tinubu for what it described as his visionary leadership in signing the landmark legislation, noting that the Act would strengthen the protection of citizens’ personal data, improve national cybersecurity, expand access to essential services and provide a solid foundation for Nigeria’s long-term digital economic growth.
It also expressed appreciation to the leadership and members of the National Assembly, the Federal Ministry of Interior, development partners and other stakeholders whose contributions led to the successful passage of the legislation.
NIMC said it would issue the necessary regulations and implementation guidelines in the coming months while working closely with government institutions, the private sector and development partners to ensure a smooth transition to the new digital identity framework.
 Act, 2026 into law, marking a major milestone){kind=link}