On 26 June 2026, President Tinubu signed The National Identity Management Commission (NIMC) Act 2026, modernising Nigeria’s identity system and boosting security. The new law harmonises previously fragmented identity databases, mandates interoperability between NIMC and agencies such as immigration, and strengthens the integrity and use of the National Identification Number (NIN). Officials said these changes will improve public service delivery, speed up digital transformation, deepen the digital economy, and enhance national security by making identity verification more reliable and automated.
By requiring agencies to integrate with the national identity system and enabling NIMC to act as a Root Certification Authority for PKI, the Act can make government services more responsive and easier to access through verified digital credentials, while also creating formal channels for identity-based service delivery and inclusion measures for vulnerable groups. The law also embeds stronger data‑protection measures, criminalises unauthorised access and identity abuse with stiffer penalties, and establishes technical trust layers (PKI, multipurpose card) that improve authentication and reduce fraud risk, thereby improving the security of digital transactions and personal data when properly implemented.
However, centralising identity and expanding mandatory NIN use for many public and private services raises specific risks to fundamental freedoms. While the Act includes safeguards, it also creates risks of surveillance, exclusion, and privacy erosion. In terms of inclusion of marginalized communities, mandatory linkage of NIN to services can restrict access for those who cannot obtain or prove NIN. Additionally, expanded data sharing increases the chance of intrusive profiling or state monitoring, and heavy criminalisation of certain identity‑related acts could be used to chill legitimate civic activity if due‑process and oversight are weak. The long-term impact of the law will therefore depend on implementation, oversight, and whether safeguards against misuse, exclusion, and rights violations are effectively enforced.