A New Mandate: Inside Nigeria’s NIMC Act 2026

…Beyond the NIN: How the NIMC Act 2026 Overhauls National Security, Data Privacy, and Digital Economy

From a legislative proposal born out of nationwide consultations in early 2024 to a fully enacted law, Nigeria’s identity management landscape has taken a monumental leap forward.

At a roundtable workshop with online publishers, under the aegis of the Guild of Corporate Online Publishers (GOCOP) in Lagos on Friday, the National Identity Management Commission (NIMC) officially unpacked the newly signed NIMC Act 2026, marking the end of a nearly two decade-old framework and ushering in a digital identity ecosystem built for modern governance, national security, and economic expansion.

Delivering an address on behalf of the Director General and CEO of NIMC, Engr. Dr. Abisoye Coker-Odusote, the Director of SERVICOM, Mrs. Florence Oloruntade, described the legislation as a transformative turning point for all citizens.

“The NIMC Act of 2007 established the Commission and gave it its initial legal mandate. But the Nigeria of 2026 is not the Nigeria of 2007,” Oloruntade noted, highlighting how rapid technological shifts, evolving security threats, and growing demands for data privacy rendered the legacy law obsolete.

Following extensive consultations with civil society, telecom operators, financial institutions, the World Bank-supported ID4D project, and the National Assembly, President Bola Ahmed Tinubu signed the NIMC Act 2026 into law on June 26, 2026.

The historic presidential assent repeals the 2007 Act and establishes NIMC as the country’s central authority for digital public infrastructure.

Key Legislative Changes in the NIMC Act 2026

Data Protection  and Privacy Alignment: Directly integrates NIMC’s operational obligations with the Nigeria Data Protection Act and international privacy benchmarks, giving citizens explicit legal protections over identity data storage, sharing, and collection.

Root Authentication Authority: Positions NIMC as the primary authority for Nigeria’s Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI), providing legal backing for secure digital signatures and trust services across public and private sectors.

Legal Clarity on Inclusion and Disclosure: Clearly defines eligibility for the National Identification Number (NIN), protects vulnerable demographics, and sets strict conditions under which data can be shared with third parties.

Cross-Agency Interoperability: Authorises the seamless harmonization of identity records with security, border, and immigration databases. NIMC revealed this integration has already enabled law enforcement and the Nigeria Immigration Service to intercept terror suspects via shared international networks.

Impact Across Sectors

For Citizens: Streamlines identity verification for basic services, ensuring a safer, more inclusive system.

For National Security: Provides a unified database framework to strengthen border control and threat detection.

For the Digital Economy: Establishes a secure foundation for banks, fintechs, and telecommunications operators to expand digital trust services.

Relying on media executives to bridge the gap between policy and public understanding, NIMC urged online publishers to combat identity-related misinformation and educate the public on their rights.

As implementation gets underway, the NIMC Act 2026 stands as a benchmarked, future-proof legal foundation designed not just to meet immediate needs, but to serve generations of Nigerians to come.

Reporting by Theresa Igata