Tinubu Signs NIMC Act 2026, Strengthens Nigeria’s Digital Identity

ABUJA — President Bola Ahmed Tinubu has signed the NIMC Act 2026 into law. Punch confirmed the signing on Friday, June 26. The new legislation strengthens the legal framework underpinning Nigeria’s National Identity Management Commission and is designed to bolster the country’s digital identity system and citizen data protection standards.

The Act gives NIMC expanded powers to enforce identity verification standards across public and private institutions. It also introduces stricter data protection obligations for any organisation that collects or processes National Identification Number data, closing gaps that have previously exposed Nigerians to identity theft and data misuse.

Presidential aide Bayo Onanuga said the signing reflects the administration’s broader digital governance agenda. He said a robust legal foundation for digital identity is essential as more government and financial services move online. He described the Act as overdue given how central the NIN has become to daily transactions.

Why the Law Matters

Nigeria’s NIN enrolment now covers the overwhelming majority of adults, and the number is required for SIM registration, bank account opening, passport applications, and an increasing number of government services. However, the legal framework governing how that data is stored, shared, and protected had not kept pace with its expanding use.

The new Act introduces penalties for unauthorised disclosure of NIN data and creates a formal complaints mechanism for citizens whose identity information is mishandled. It also mandates periodic security audits of NIMC’s database infrastructure, a response to long-standing concerns about the vulnerability of centralised identity systems to breach.

Digital rights groups gave the Act a cautious welcome. They said stronger penalties and audit requirements are genuine improvements, but warned that enforcement capacity, not legislative text, will determine whether Nigerians’ data is actually protected. They called for NIMC to publish regular public reports on data breaches and remediation.

Part of a Wider Push

The NIMC Act signing comes the same week Tinubu established the National Health Technology Office, signalling a broader pattern of digital governance reforms moving through Abuja simultaneously. Officials said the two initiatives are designed to work together, since health records increasingly depend on the same identity verification infrastructure that NIMC manages.

The private sector, particularly banks and fintech firms that rely heavily on NIN verification for know-your-customer compliance, welcomed the clearer legal framework. Industry players said predictable rules around data handling will reduce compliance uncertainty and support continued growth in Nigeria’s digital financial services sector.