Nigeria has entered a new era of digital identity management following President Bola Tinubu's signing of the National Identity Management Commission (NIMC) Act, 2026, on June 26, 2026. This sweeping reform replaces the 2007 law and significantly expands the country's identity framework, transforming the National Identity Number (NIN) from a tool for bank accounts, SIM registration, and passport applications into the foundation of Nigeria's broader digital economy.
Key Highlights of the New NIMC Act
The new law introduces several major changes affecting citizens, businesses, and government agencies. Among the most important provisions are the repeal of the 2007 NIMC Act, the establishment of digital identity as the foundation of Nigeria's Digital Public Infrastructure (DPI), and the phasing out of physical identity cards as the primary means of identification. Nigerians can now verify their identity using smartphone applications, QR codes, biometric authentication, digital wallets, and other digital credentials.
NIMC becomes Nigeria's Root Certification Authority, responsible for managing the country's Public Key Infrastructure (PKI). Digital signatures and secure online authentication receive stronger legal backing. Identity fraud now attracts tougher penalties, including prison terms and multi-million naira fines. The National Identity Database is protected under stricter privacy and cybersecurity provisions, with citizens' consent becoming central to how identity data is shared with third parties. The law also requires NIMC to create special enrolment systems for vulnerable and underserved populations.
From Plastic Identity Cards to Digital Identity
One of the biggest changes introduced by the Act is the shift away from dependence on physical identity cards. For years, millions of Nigerians experienced long delays in receiving the General Multi-Purpose Card (GMPC) after enrolling for the NIN due to production costs and supply chain challenges. Rather than relying on a plastic card, the new law adopts a technology-neutral approach that allows identity verification through multiple digital channels. Nigerians will increasingly be able to prove their identity using mobile devices, biometrics, QR codes, and other secure technologies. This approach mirrors digital identity systems already operating in countries such as India, Estonia, Singapore, Brazil, Kenya, and Togo.
NIMC Becomes Nigeria's Digital Trust Authority
Perhaps the most significant reform is one that most Nigerians may never directly see. The Act designates NIMC as the country's Root Certification Authority, giving it responsibility for Nigeria's Public Key Infrastructure (PKI). This means the commission will oversee the digital certificates, authentication systems, and encryption technologies that protect online banking, government services, electronic signatures, and digital communications. In practical terms, the law strengthens the security behind online transactions by ensuring identities can be verified and protected against fraud.
Tougher Penalties for Identity Fraud
The new legislation significantly expands NIMC's enforcement powers. Unlike the previous law, the commission can now investigate identity-related crimes and obtain court approval to conduct searches, seize evidence, and prosecute illegal enrolment centres, identity fraud syndicates, and data traffickers. The penalties are also much stiffer. Individuals convicted of unauthorised access to the National Identity Database face a minimum of five years' imprisonment or a fine of at least ₦10 million. Corporate organisations may be fined a minimum of ₦20 million, while company executives involved in violations could also face personal criminal liability. The Act also imposes severe sanctions on anyone who attempts multiple registrations or impersonates another person's identity.
Stronger Data Privacy and Inclusion
The 2026 Act also introduces stronger safeguards for personal information by bringing NIMC fully under the Nigeria Data Protection Act (NDPA). The legislation adopts a consent-first approach, meaning third parties can generally access information in the National Identity Database only with the individual's approval. Exceptions are limited to situations such as court orders, criminal investigations, and matters involving public interest. The law also requires NIMC to clearly inform citizens how their personal information will be collected, stored, processed, and shared during enrolment.
Beyond privacy, the Act seeks to reduce identity exclusion by directing the commission to establish specialised registration systems for vulnerable groups, including people without permanent addresses, ensuring they can access healthcare, financial services, and government social intervention programmes. While the legislation lays the legal foundation for a more secure, inclusive, and technology-driven identity system, its long-term success will depend largely on effective implementation, adequate infrastructure, and public trust.
FG Announces New Update on NIN Slip Download
Legit.ng earlier reported that the NIMC has announced that Nigerians can now download their National Identification Number (NIN) slip at no cost through the NINAuth mobile application. The commission made the announcement on Thursday, July 2, via its official X account, stating that the latest version of the NINAuth app now supports free NIN slip downloads, alongside improved privacy protections, stronger security measures, and access to a broader range of integrated government services. NIMC urged NIN holders who already have the app installed to update it immediately to access the new features.
