NIMC PROPOSED PRIVACY POLICY

A Policy outlines how the National Identity Management Commission collects, stores, and protects personal data from NIN enrollees. It targets Nigerian citizens, residents, government agencies, and private institutions using NIN data.

What Is This Policy?

NIMC's privacy policy governing how personal data collected during National Identification Number enrolment and subsequent identity management activities is collected, stored, used, and protected.

Who Does It Target?

All Nigerian citizens and residents who have enrolled for a NIN Government agencies accessing the National Identity Database Private sector institutions verifying NIN through NIMC's API NIMC staff and data management officers

What Does It Aim to Achieve?

Ensure transparency about how NIMC collects and uses personal data, establish data subject rights in relation to identity data, and demonstrate compliance with Nigeria's data protection laws.

Key Features

Data Collection: Describes what personal and biometric data is collected during NIN enrolment and the legal basis for collection. Data Use: Specifies how collected identity data is used for identity verification, service delivery, and national security. Third Party Sharing: Identifies the categories of organisations that may access NIN data and the conditions for such access. Data Security: Describes technical and organisational measures protecting the National Identity Database.

Current Status

Rollout Stage: Active Coverage: All NIMC data subjects and identity verification partners Beneficiaries: All Nigerians whose identity data is held by NIMC Funding: Federal Government

How to Access

Data subjects may request access to their personal data held by NIMC Correction requests for inaccurate data may be submitted at any NIMC centre Privacy complaints addressed to NIMC's data protection officer Application method: Access or correction requests at any NIMC enrolment centre or https://www.nimc.gov.ng

Important Terms

Biometric data is treated as sensitive personal data under Nigerian data protection law NIMC may share data with authorised agencies for national security purposes Data subjects have rights to access, correction, and restriction of processing subject to legal limitations

Official Resources

Website: https://www.nimc.gov.ng Contact: National Identity Management Commission (NIMC)

Legal Framework

Operates under the Nigeria Data Protection Act 2023, the National Identity Management Commission Act 2007, the Cybercrimes (Prohibition, Prevention, Etc.) Act 2015, and the Freedom of Information Act 2011. Draws on GDPR principles (as comparative standard), the African Union Convention on Cyber Security and Personal Data Protection, and the NITDA Data Protection Regulation.