National Identity Management Commission (NIMC) Act, 2026

The National Identity Management Commission (NIMC) Act, 2026 repeals the National Identity Management Commission Act No. 23 of 2007. The legislation overhauls Nigeria's identity management ecosystem by providing legal backing for Digital Public Infrastructure (DPI), enforcing mandatory data consent protocols in line with the Nigeria Data Protection Act, and establishing NIMC as the Root Certification Authority for National Public Key Infrastructure (PKI) to secure digital transactions and e-signatures.

In response to the rapid evolution of digital commerce, cyber security challenges, and the need for a unified national database, the federal legislative framework governing identity has undergone a comprehensive transformation. The National Identity Management Commission (NIMC) Act, 2026 officially repeals and replaces the aging 2007 NIMC Act, establishing a secure, future-proof legal foundation for Nigeria's Digital Public Infrastructure (DPI).

Key Provisions and Structural Changes ● Root Certification Authority: The Act formally designates NIMC as the Root Certification Authority for Nigeria’s National Public Key Infrastructure (PKI). This grants statutory backing for issuing digital certificates, validating electronic signatures, and securing electronic communications across public and private sectors. ● Enforced Data Privacy & Consent: Fully aligned with the Nigeria Data Protection Act (NDPA), the legislation explicitly bars any unauthorized access, extraction, or processing of personal records stored in the National Identity Database without explicit citizen consent and legal authorization. ● Severe Penalties for Identity Fraud: To combat rampant identity theft and database tampering, the law introduces strict deterrents, including custodial sentences of up to five (5) years and severe financial penalties for unauthorized data scraping, system hacking, or falsifying identity credentials. ● Standardized Interoperability: The framework institutionalizes the "One Person, One Identity" standard, streamlining verification pipelines across banking, telecommunications, travel, and public service delivery.

Impact and Outlook By bridging the gap between legacy identity management and modern digital trust demands, the NIMC Act 2026 provides citizens with stronger legal ownership over their personal data while giving enterprises and fintechs the regulatory certainty required for seamless digital onboarding and remote KYC compliance.