President Bola Tinubu has signed the National Identity Management Commission Act 2026 into law, ushering in a sweeping overhaul of Nigeria’s identity management system and introducing some of the toughest penalties yet for identity-related crimes.
The new law replaces the country’s nearly two-decade-old identity framework with what the Presidency describes as a modern, fully digital infrastructure designed to anchor Nigeria’s digital economy and support its ambition to become a $1 trillion economy.
Under the Act, the National Identity Management Commission is formally designated as the Root Certification Authority for Nigeria’s National Public Key Infrastructure and wider Digital Public Infrastructure. This places NIMC at the centre of trust for electronic transactions, digital signatures and verified identities across both public and private sectors.
The legislation also hardens protections around citizens’ personal data by aligning identity management with the Nigerian Data Protection Act. It explicitly restricts access to personal information without the consent of the data subject, bars use of data beyond the purpose for which it was collected and requires that any access follow proper legal procedures.
The Act significantly expands the role of the National Identification Number. NIN will now be mandatory for a broad range of activities, including obtaining passports, registering to vote, opening and operating bank accounts, conducting land transactions, accessing telecommunications services, managing pensions and insurance, paying taxes, securing consumer credit and using most government services.
To simplify identity credentials, the law introduces a General Multipurpose Card, a single card intended to serve as a versatile identity token for verification across multiple sectors.
Special provisions target vulnerable and underserved Nigerians, including people without permanent addresses. The Act mandates tailored enrolment measures and creates an identifier system to ensure they are not excluded from financial and social services. It also extends easier access to identity services for Nigerians in the diaspora through expanded NIMC operations abroad.
Governance of the identity ecosystem is tightened through a reconstituted NIMC board, now drawing representatives from 14 key agencies, among them the Independent National Electoral Commission, Nigeria Police Force, Department of State Services, Economic and Financial Crimes Commission, Central Bank of Nigeria, National Population Commission and the Office of the National Security Adviser.
On enforcement, the Act dramatically raises the cost of identity crime. Penalties for offences such as multiple registration, impersonation and unauthorised access have been increased by up to 100 times, with corporate fines reaching as high as ₦20 million and a minimum five-year jail term for serious violations. NIMC is also granted court-supervised powers to investigate offences, conduct searches, seize evidence, decrypt data and arrest suspects.
