By Victoria Ogechukwu Ujam
President Bola Tinubu has signed the National Identity Management Commission (NIMC) Act 2026 into law, replacing the nearly two-decade-old law that established Nigeria’s identity management system.
According to the NIMC, the new Act is designed to modernise the country’s identity ecosystem, strengthen digital security and position Nigeria for an increasingly digital economy.
But beyond the legal language, what exactly does the new law mean for ordinary Nigerians?
Why was a new law needed?
The previous NIMC Act was enacted in 2007, but it no longer reflected Nigeria’s current digital reality. At the time, online banking, digital government services, electronic commerce and data protection laws were still at early stages of development.
NIMC says the rapid growth of digital services, increasing cybersecurity threats and the need for stronger protection of personal information made it necessary to replace the old law with a more modern legal framework.
Your NIN remains at the centre
One of the key provisions of the new Act is that it reinforces the National Identification Number (NIN) as Nigeria’s foundational identity credential.
The law also strengthens the principle of “One Person, One Identity,” meaning every individual is expected to have a unique identity linked to a single NIN.
For most Nigerians, this means the NIN will continue to be the primary means of identity verification when accessing government and many private-sector services.
Stronger protection for personal data
One of the major changes announced by NIMC is stronger safeguards for personal information.
The Commission says the new law aligns identity management with the Nigeria Data Protection Act and international privacy standards to ensure that citizens’ personal information is collected, processed and stored more securely.
In practical terms, the goal is to reduce the risk of identity theft, data breaches and unauthorised access to personal records.
Nigeria moves further into digital identity
Unlike the 2007 law, which focused largely on physical identity management, the new Act formally recognises both physical and digital identity credentials linked to an individual’s NIN.
This means identity verification is expected to become more digital, allowing individuals to securely prove their identity across different platforms without relying solely on physical documents.
Faster and more secure verification
The Act also empowers NIMC to facilitate secure and interoperable exchange of identity information among Ministries, Departments and Agencies (MDAs), financial institutions and authorised private organisations.
For citizens, this could translate into quicker identity verification when accessing public services, opening bank accounts or completing other transactions that require identity confirmation.
A bigger role for NIMC
The new law designates NIMC as Nigeria’s Root Certification Authority for the National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI).
Simply put, this places the Commission at the centre of Nigeria’s digital trust system. It will be responsible for supporting secure digital identity verification, authentication and electronic trust services used by government institutions and private organisations.
One card, multiple uses
The Act also positions the NIMC General Multipurpose Card as a nationwide identity credential under the theme “One Card, Multiple Possibilities.”
According to NIMC, the card is expected to support identity verification across multiple services, reducing the need for different identity credentials for different transactions.
Expanding access to identity
Another notable provision is the introduction of special measures aimed at increasing enrolment among vulnerable and underserved populations, including people without permanent residences.
NIMC says this is intended to ensure that more Nigerians are included in the national identity system and are able to access essential public and financial services.
Tougher measures against identity fraud
The Commission says the Act introduces stricter penalties for offences such as multiple registrations, identity theft and impersonation.
While the Commission has highlighted stronger anti-fraud measures, the full text of the Act will provide more detail on the specific offences and penalties.
2007 vs. 2026: What’s Different?
The new NIMC Act does not discard Nigeria’s identity system. Instead, it builds on the 2007 law by updating it for a digital era. Here’s how they compare:
| 2007 NIMC Act | 2026 NIMC Act |
| Established the NIMC and created the legal framework for Nigeria’s National Identity Database. | Repeals the 2007 law and introduces a modern legal framework designed to support a digital economy |
| Focused mainly on identity registration and the issuance of identity credentials. | Expands NIMC’s role to include secure digital identity, authentication and electronic trust services. |
| Introduced the NIN as a unique identity for every registered person. | Reinforces the NIN as Nigeria’s foundational identity credential under the “One Person, One Identity” principle. |
| Emphasised physical identity management. | Formally recognises both physical and digital identity credentials linked to a person’s NIN. |
| Contained privacy provisions but was enacted before Nigeria’s current data protection framework. | Introduces stronger data protection safeguards in line with the Nigeria Data Protection Act and international best practices. |
| Did not provide for a national digital trust infrastructure. | Designates NIMC as the Root Certification Authority for Nigeria’s National PKI and DPI, enabling secure digital verification and trusted electronic transaction |
| Did not specifically provide for inclusion measures targeting underserved groups. | Introduces measures to improve enrolment for vulnerable and underserved populations, including people without permanent residences. |
What Nigerians can expect
According to NIMC, implementation of the new law is expected to deliver faster and more secure identity verification, better protection of personal information and easier access to identity services, including for Nigerians in the diaspora.
Other benefits, the Commission added, include improved interoperability among government institutions and private organisations, reduced identity theft and identity-related fraud, greater financial and digital inclusion, particularly for vulnerable groups and more efficient public service delivery.
What happens next?
Although the Act has now been signed into law, NIMC says it will issue regulations, guidelines and other implementation instruments to give full effect to its provisions.
For now, Nigerians do not need to obtain a new National Identification Number. Instead, the new law provides the legal framework for strengthening the country’s digital identity system while keeping the NIN at the centre of identity verification and access to services.
As implementation begins, the impact of the reforms will depend on how effectively the new provisions are translated into everyday services that are secure, accessible and easy for Nigerians to use.
