Tinubu signs new NIMC Act, introduces five-year jail term for identity fraud

President Bola Ahmed Tinubu has signed the National Identity Management Commission (NIMC) Act 2026 into law, introducing sweeping reforms to Nigeria’s digital identity system and imposing tougher penalties for identity-related offences, including a five-year prison sentence for identity fraud.

The new legislation repeals the National Identity Management Commission Act of 2007 and establishes a modern legal framework aimed at strengthening digital identity management, improving data security, and enhancing interoperability across government institutions. The law is also designed to align Nigeria’s identity ecosystem with global standards in cybersecurity, digital governance, and data protection.

A key provision of the Act prescribes up to five years’ imprisonment for individuals convicted of identity theft, impersonation, or deliberate multiple registrations. The government said the stricter sanctions are intended to deter identity fraud and boost confidence in Nigeria’s digital verification systems.

The law also designates the National Identity Management Commission (NIMC) as the Root Certification Authority for Nigeria’s National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI), empowering the agency to oversee digital certificates, secure electronic signatures, and electronic trust services nationwide.

In addition, the legislation reinforces the “One Person, One Identity” policy by recognizing the National Identification Number (NIN) as the country’s primary identity credential. It provides for both physical and digital identity credentials linked to each individual’s NIN and creates a legal framework for the NIMC General Multipurpose Card, which will support multiple public and financial services.

The Act further authorizes secure data sharing between Ministries, Departments and Agencies (MDAs), financial institutions, and private organisations while introducing stronger safeguards for the collection, storage, and processing of citizens’ biometric and biographical information in line with the Nigeria Data Protection Act.

Speaking after the signing, NIMC Director-General, Dr. Abisoye Coker-Odusote, described the legislation as a significant milestone that would strengthen Nigeria’s digital infrastructure, improve public service delivery, and promote financial inclusion through a more secure national identity system.

Minister of Interior Dr. Olubunmi Tunji-Ojo also highlighted the national security benefits of the enhanced identity framework, revealing that recent integration of NIMC databases with immigration and Interpol systems had already assisted security agencies in tracking and apprehending suspected terrorists attempting to enter the country.

The signing ceremony at the Presidential Villa in Abuja was attended by senior government officials, including Senate President Godswill Akpabio, Deputy Speaker of the House of Representatives Benjamin Kalu, and Attorney-General of the Federation and Minister of Justice Lateef Fagbemi (SAN).

The Federal Government said the new Act is expected to strengthen trust in Nigeria’s digital identity ecosystem, improve service delivery across public and private sectors, and enhance efforts to combat identity fraud and cybercrime nationwide.