Five key things you should know about the NIMC Act 2026
NIMC Act 2026: A New Era for Digital Identity, Data Protection, and Corporate Compliance in Nigeria
President Bola Ahmed Tinubu has assented to the National Identity Management Commission (NIMC) Act 2026, ushering in a comprehensive overhaul of Nigeria’s digital identity framework. This landmark legislation replaces the previous two-decade-old legal structure, signalling a strategic move towards a robust and secure digital economy. The Act is poised to significantly impact how businesses operate, how individuals access services, and the legal responsibilities surrounding personal data.
The NIMC Act 2026 establishes NIMC as Nigeria’s designated digital trust authority. This pivotal role positions the commission as the Root Certification Authority for the nation’s National Public Key Infrastructure and Digital Public Infrastructure. Consequently, NIMC will be central to securing digital signatures, verifying identities, and overseeing electronic transactions across all sectors. This elevation of NIMC’s authority necessitates a keen awareness from legal and compliance professionals regarding the standards and protocols that will govern digital interactions.
A cornerstone of the new legislation is the enhanced protection of personal data, aligning Nigeria’s identity management system with the Nigerian Data Protection Act. President Tinubu underscored the imperative of safeguarding citizens’ information, stating, “I will not allow the data of Nigerians to be treated carelessly.” The Act strictly prohibits the access, use beyond stated purposes, or acquisition of personal information without explicit consent or adherence to established legal procedures. This stringent approach demands that all organisations handling personal data review and fortify their data protection policies and practices to ensure compliance.
The National Identification Number (NIN) is now a mandatory prerequisite for a broad spectrum of essential public and private sector services. This includes, but is not limited to, passport applications, voter registration, the opening of bank accounts, land transactions, telecommunications services, pension and insurance claims, tax payments, consumer credit facilities, and access to government services. President Tinubu’s emphasis on “One person. One identity. One number.” highlights the drive for a unified and verifiable identity system. Furthermore, the introduction of a General Multipurpose Card aims to consolidate identity credentials, simplifying verification processes across various domains. Businesses and service providers must integrate NIN verification into their onboarding and service delivery protocols.
The NIMC Act 2026 also champions expanded inclusion for vulnerable populations and Nigerians residing abroad. Specific provisions are made for an Identifier system tailored for individuals without permanent residences, aiming to bring underserved groups into the formal identity ecosystem. Initiatives to foster social and financial inclusion through trusted digital identity are also mandated. For Nigerians overseas, the Act promises improved access to identity services, with a focus on streamlining enrolment and verification.
Crucially, the legislation introduces significantly stricter penalties for identity-related offences. Impersonation, multiple registrations, and unauthorised access to identity records will now attract more severe sanctions. Corporate organisations found in violation face potential fines of up to ₦20 million, while individuals convicted of offences such as unauthorised access, multiple registration, or impersonation risk a minimum of five years imprisonment. The Act further empowers NIMC with court-authorised investigative powers, including the authority to conduct searches, seize evidence, decrypt data, and arrest suspects in connection with identity fraud. This heightened enforcement regime necessitates a proactive approach to compliance and risk management for all entities.
