News
Five-Year Jail, ₦20m Fine: Major Changes Every Nigerian Must Know About the New NIMC Act 2026
President Bola Tinubu has signed the NIMC Act 2026 into law, introducing tougher penalties for identity fraud, including five-year jail terms and fines of up to ₦20 million.
- President Bola Tinubu has signed the NIMC Act 2026 into law, introducing tougher penalties for identity fraud, including five-year jail terms and fines of up to ₦20 million.

President Bola Tinubu on Friday signed the National Identity Management Commission (NIMC) Act 2026 into law, ushering in a new era for Nigeria’s identity management system with tougher penalties for identity fraud, stronger data protection measures and a comprehensive digital identity framework for all Nigerians.
The new legislation replaces the nearly 20-year-old NIMC Act and seeks to modernise the country’s identity infrastructure as part of the government’s broader digital transformation agenda and ambition to build a $1 trillion economy.
Announcing the development on his verified X account, President Tinubu said the old legal framework had become outdated and no longer reflected the realities of an increasingly digital world.
“For nearly twenty years, Nigeria’s identity system operated under a law written for a different era. That era is over,” the President said.
NIMC Becomes Nigeria’s Digital Trust Authority
One of the major provisions of the Act is the designation of the National Identity Management Commission as the Root Certification Authority for Nigeria’s National Public Key Infrastructure and Digital Public Infrastructure.
According to Tinubu, this gives NIMC the responsibility of securing digital signatures, verified identities and trusted online transactions.
“NIMC now holds the keys to trust in our digital economy. This is how serious nations build digital economies, and we are building one for Nigeria,” he stated.
Stronger Data Protection for Nigerians
The President also emphasised that the Act aligns Nigeria’s identity management framework with the Nigerian Data Protection Act, providing greater safeguards for citizens’ personal information.
Under the new law, personal data cannot be accessed without consent, used beyond the purpose for which it was provided or shared outside legally approved channels.
“This is your right as a Nigerian, and this law protects it,” Tinubu said.
One NIN for Major Transactions
The National Identification Number (NIN) will now serve as a key requirement for numerous public and private transactions, including:
- Passport applications
- Voter registration
- Opening bank accounts
- Land transactions
- Telecommunications services
- Pensions and insurance
- Tax payments
- Consumer credit facilities
- Access to government services
The President described the new framework with the phrase:
“One person. One identity. One number.”
The Act also introduces a General Multipurpose Card, a single identity credential that can be used across multiple sectors of the economy.
Protection for Vulnerable Nigerians and the Diaspora
The legislation creates a special identity system for vulnerable persons, including those without permanent residences, and mandates measures to ensure underserved Nigerians are enrolled in the national identity database.
Tinubu said the law also expands access to identity services for Nigerians living abroad, making it easier for citizens in the diaspora to obtain and use identity-related services.
Governing Board Reconstituted
The new Act reconstitutes NIMC’s Governing Board with representatives from 14 key government institutions, including the Independent National Electoral Commission (INEC), the Nigeria Police Force, the Department of State Services (DSS), the Economic and Financial Crimes Commission (EFCC), the Central Bank of Nigeria (CBN), the National Population Commission (NPC) and the Office of the National Security Adviser (ONSA).
Tougher Penalties for Identity Fraud
Perhaps the most striking provision of the law is the introduction of significantly stiffer penalties for identity-related crimes.
According to the President, penalties have been increased by as much as 100 times.
Key sanctions include:
- Fines of up to ₦20 million for corporate organisations involved in identity-related offences.
- A minimum of five years imprisonment for unauthorised access to identity data.
- Five-year jail terms for multiple registrations and impersonation.
- Expanded powers for NIMC to investigate offences, conduct searches, seize evidence, decrypt data and arrest suspects with court authorisation.
“There will be no tolerance for identity fraud,” Tinubu warned.
The President commended the National Assembly, the Ministry of Interior, development partners and NIMC officials for their contributions to the legislation, describing the new law as a major step towards building a secure, inclusive and prosperous Nigeria under the Renewed Hope Agenda.


