President Bola Tinubu on Friday signed the National Identity Management Commission Act 2026 into law, introducing a new legal framework for Nigeria’s digital identity system that strengthens data protection, expands the use of the National Identification Number and imposes stiffer penalties for identity-related offences.
In a statement posted on his verified X account, Tinubu said the legislation replaces the nearly two-decade-old legal framework governing Nigeria’s identity management system with a modern digital identity infrastructure.
The president said the law designates the National Identity Management Commission as the Root Certification Authority for Nigeria’s National Public Key Infrastructure and Digital Public Infrastructure.
According to Tinubu, the commission will serve as the foundation for secure digital identities, digital signatures and electronic transactions across the country.
He said the legislation aligns Nigeria’s identity management system with the Nigerian Data Protection Act, providing stronger safeguards for citizens’ personal information.
“The Act expressly says your personal information cannot be accessed without your consent. It cannot be used beyond the purpose for which you gave it, and any access must go through proper legal channels,” Tinubu said.
Under the new law, the National Identification Number will be required for a broad range of public and private sector transactions, including passport applications, voter registration, bank account opening, land transactions, telecommunications services, pensions, insurance, tax payments, consumer credit and access to government services.
The president also announced the introduction of a General Multipurpose Card, which he said would serve as a single identity credential for verification across multiple sectors.
Tinubu said the legislation includes provisions to improve access to identity services for vulnerable and underserved Nigerians, including people without permanent residences, and expands access to identity services for Nigerians living abroad.
According to him, the Act also reconstitutes the governing board of the National Identity Management Commission with representatives from 14 government agencies, including the Independent National Electoral Commission, Nigeria Police Force, Department of State Services, Economic and Financial Crimes Commission, Central Bank of Nigeria, National Population Commission and the Office of the National Security Adviser.
The president said the law significantly increases penalties for identity-related crimes, including identity theft, impersonation and multiple registration.
He said corporate offenders could face fines of up to ₦20 million, while individuals convicted of unauthorized access, multiple registration or impersonation face a minimum prison sentence of five years.
Tinubu added that the commission has been granted court-authorized powers to investigate offences, conduct searches, seize evidence, decrypt data and arrest suspects.
He commended the National Assembly, the Ministry of Interior, the management and staff of the National Identity Management Commission, development partners and other stakeholders for their contributions to the passage of the legislation.
Tinubu said the new law would strengthen Nigeria’s digital economy, improve service delivery and support the country’s long-term economic development.
