President Tinubu Signs NIMC Act 2026 into Law, Strengthening Nigeria's Digital Identity and Cybersecurity Framework

President Tinubu Signs NIMC Act 2026 into Law, Strengthening Nigeria's Digital Identity and Cybersecurity Framework

The National Identity Management Commission (NIMC) has announced the signing into law of the National Identity Management Commission (NIMC) Act, 2026 by President Bola Ahmed Tinubu, GCFR, describing it as a landmark reform that ushers Nigeria into a new era of secure, inclusive and digitally driven identity management.

The new legislation repeals the NIMC Act of 2007 and introduces a modern legal framework designed to align Nigeria's identity ecosystem with global best practices, emerging technologies and the demands of the rapidly evolving digital economy.

A major highlight of the Act is the designation of NIMC as the Root Certification Authority for Nigeria's National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI). This positions the Commission as the nation's trusted authority for secure digital identity, authentication, encryption, digital signatures and electronic trust services across both public and private sector platforms.

The Act also empowers NIMC to facilitate secure, interoperable and seamless data exchange among Ministries, Departments and Agencies (MDAs), financial institutions and authorised private organisations, laying the foundation for a trusted digital economy.

According to the Commission, the legislation advances President Tinubu's Renewed Hope Agenda by accelerating digital transformation, strengthening national security, expanding financial and social inclusion, improving public service delivery and supporting Nigeria's aspiration of building a one-trillion-dollar economy.

Explaining the need for the new law, NIMC noted that nearly two decades after the enactment of the 2007 Act, rapid advancements in digital services, e-governance, electronic commerce, cybersecurity and data protection made it necessary to establish a more robust and contemporary legal framework.

Among the key innovations contained in the Act are stronger data protection and privacy safeguards aligned with the Nigeria Data Protection Act (NDPA) and international standards; statutory recognition of the National Identification Number (NIN) as Nigeria's foundational identity credential under the principle of "One Person, One Identity"; legal recognition of both physical and digital identity credentials; stricter penalties against identity theft, impersonation and multiple registrations; and enhanced provisions for the inclusion of vulnerable and underserved populations.

The Act also strengthens the role of the NIMC General Multipurpose Card as a nationwide identity credential under the theme, "One Card, Multiple Possibilities."

With the implementation of the new law, Nigerians are expected to benefit from easier access to identity services, including for citizens in the diaspora, stronger protection of personal data, enhanced cybersecurity, faster identity verification, improved interoperability across government and private-sector platforms, greater financial and digital inclusion, reduced identity-related fraud, improved ease of doing business and more efficient public service delivery.

The Commission assured Nigerians that implementation of the Act will be guided by transparency, professionalism, innovation, inclusivity and citizen-centred service delivery while safeguarding personal data and strengthening public trust.

NIMC expressed profound appreciation to President Bola Ahmed Tinubu for signing the landmark legislation into law, describing it as the most significant reform of Nigeria's identity management legal framework since the Commission's establishment.

The Commission also commended the President of the Senate, the Speaker of the House of Representatives, the Joint Committee on Identity and National Population Commission, members of the National Assembly, the Honourable Minister of the Interior, development partners including Identity for Development (ID4D), stakeholders, management and staff of NIMC, and Nigerians whose support contributed to the successful passage of the legislation.

The Commission stated that it will issue the necessary regulations, guidelines and subsidiary instruments to ensure the smooth implementation of the Act while continuing to engage government institutions, the private sector, development partners and other stakeholders to strengthen Nigeria's digital identity ecosystem in line with international best practices.