Tinubu signs NIMC Act 2026, names commission digital identity authority

President Bola Tinubu has signed the National Identity Management Commission (NIMC) Act 2026 into law. The new law replaces the 2007 legislation and gives the commission expanded powers to oversee Nigeria’s digital identity infrastructure.

NIMC disclosed this in a statement issued on Friday by its Head of Corporate Communications, Kayode Adegoke. The new law establishes NIMC as the Root Certification Authority for Nigeria’s National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI). This places the commission at the centre of the country’s digital identity, authentication, and electronic trust framework.

NIMC described the legislation as a landmark reform. It said the law would strengthen cybersecurity, improve data protection, expand financial inclusion, and support Nigeria’s broader digital transformation agenda.

According to the commission, the new law provides a modern legal framework designed to align Nigeria’s identity ecosystem with global best practices and emerging technologies. A major provision of the Act designates NIMC as the trusted national authority responsible for digital identity authentication, electronic trust services, digital certificates, encryption, and secure identity verification across both public and private sector platforms.

The commission said the law also empowers it to facilitate secure and interoperable data exchange among government agencies, financial institutions, and private organisations. This creates the foundation for a trusted digital economy.

“This landmark reform directly advances President Bola Ahmed Tinubu’s Renewed Hope Agenda by accelerating digital transformation, strengthening national security, expanding financial and social inclusion, improving public service delivery and supporting the development of a secure Digital Public Infrastructure,” the commission stated.

NIMC noted that the previous legal framework had been in place for nearly two decades. During that time, the global digital landscape underwent significant changes. The commission said the growth of e-commerce, digital government services, data protection requirements, and cybersecurity threats made it necessary to introduce a more robust and contemporary identity management framework.