President Bola Tinubu has signed the National Identity Management Commission (NIMC) Act 2026 into law, introducing stricter penalties for identity-related offences and establishing a comprehensive digital identity framework for Nigerians.

Announcing the development on Friday via his verified X account, the President said the new legislation replaces the nearly 20-year-old legal framework with a modern, secure and fully digital identity system.

Tinubu said the Act designates NIMC as the Root Certification Authority for Nigeria’s National Public Key Infrastructure and Digital Public Infrastructure, making it the central authority for digital signatures, secure transactions and identity verification.

He added that the law aligns Nigeria’s identity management system with the Nigerian Data Protection Act, providing stronger safeguards for citizens’ personal information.

According to the President, personal data cannot be accessed without the owner’s consent, used beyond its intended purpose or obtained outside due legal processes.

The Act also makes the National Identification Number (NIN) mandatory for several public and private transactions, including passport applications, voter registration, bank account operations, land transactions, telecommunications services, pensions, insurance, tax payments, consumer credit and access to government services.

Tinubu said the legislation introduces a General Multipurpose Card to serve as a single identity credential for verification across multiple sectors.

The law also provides special measures to enrol vulnerable and underserved Nigerians, including persons without permanent residences, into the national identity system while expanding access to identity services for Nigerians in the diaspora.

The President noted that the Act reconstitutes NIMC’s Governing Board with representatives from 14 government agencies, including the Independent National Electoral Commission (INEC), Nigeria Police Force, Department of State Services (DSS), Economic and Financial Crimes Commission (EFCC), Central Bank of Nigeria (CBN), National Population Commission (NPC) and the Office of the National Security Adviser (ONSA).

The legislation prescribes stiffer penalties for identity-related offences, including fines of up to ₦20 million for corporate organisations and a minimum of five years’ imprisonment for offences such as unauthorised access, multiple registration and identity impersonation.

It also grants the commission court-authorised powers to investigate offences, conduct searches, seize evidence, decrypt data and arrest suspects.

Tinubu commended the National Assembly, the Ministry of Interior, NIMC management, development partners and other stakeholders for their roles in the passage of the legislation, describing the Act as a major step towards building a more secure, inclusive and digitally driven economy.