President Bola Tinubu has signed the National Identity Management Commission (NIMC) Act 2026 into law, introducing sweeping reforms aimed at strengthening Nigeria’s digital identity system, protecting personal data, and tackling identity-related crimes.
The new legislation replaces the nearly two-decade-old legal framework governing the country’s identity management system and establishes stricter penalties for identity fraud. Under the Act, individuals convicted of identity-related offences could face fines running into millions of naira, imprisonment of up to five years, or both, depending on the nature of the offence.
The law also reinforces the National Identification Number (NIN) as the country’s primary digital identity credential, expanding its role across government services, banking, taxation, healthcare, telecommunications, and other sectors. Officials say the reforms are designed to improve service delivery, reduce fraud, and support Nigeria’s growing digital economy.
Interior Minister Olubunmi Tunji-Ojo described the legislation as a major milestone in Nigeria’s digital transformation agenda. According to the minister, the upgraded identity management system has already delivered significant security gains.
He revealed that security agencies recently used the integrated NIMC biometric database to identify and arrest seven suspected Boko Haram and ISWAP commanders who allegedly attempted to enter Nigeria after returning from the 2026 Hajj pilgrimage. Authorities said the suspects were flagged through linked identity databases before being taken into custody for further investigation.
The government argues that the new law will strengthen national security by making it more difficult for criminals and terror suspects to operate under false identities while improving coordination among security agencies.
However, privacy advocates have urged authorities to ensure strong safeguards for citizens’ biometric information. They argue that while a centralized identity system offers security benefits, it must also guarantee transparency, accountability, and protection against misuse of personal data.
