President Bola Tinubu has signed the National Identity Management Commission (NIMC) Act 2026 into law, replacing the 2007 legislation and giving the commission expanded powers to oversee Nigeria’s digital identity infrastructure.
NIMC disclosed this in a statement issued on Friday by its head of Corporate Communications, Kayode Adegoke.
The new law establishes NIMC as the Root Certification Authority for Nigeria’s National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI), placing it at the centre of the country’s digital identity, authentication, and electronic trust framework.
NIMC described the legislation as a landmark reform that would strengthen cybersecurity, improve data protection, expand financial inclusion, and support Nigeria’s broader digital transformation agenda.
According to the commission, the new law provides a modern legal framework designed to align Nigeria’s identity ecosystem with global best practices and emerging technologies.
A major provision of the Act designates NIMC as the trusted national authority responsible for digital identity authentication, electronic trust services, digital certificates, encryption, and secure identity verification across both public and private sector platforms.
The commission said the law also empowers it to facilitate secure and interoperable data exchange among government agencies, financial institutions, and private organisations, creating the foundation for a trusted digital economy.
“This landmark reform directly advances President Bola Ahmed Tinubu’s Renewed Hope Agenda by accelerating digital transformation, strengthening national security, expanding financial and social inclusion, improving public service delivery and supporting the development of a secure Digital Public Infrastructure,” the commission stated.
NIMC noted that the previous legal framework had been in place for nearly two decades, during which the global digital landscape underwent significant changes.
