Nigeria has introduced sweeping changes to its National Identity Management framework following the enactment of the NIMC Act 2026, imposing stiffer penalties for identity-related offences, including prison terms of up to five years for violators.
The revised law is aimed at strengthening the country’s national identity system, curbing identity fraud, and safeguarding citizens’ personal data amid growing concerns over digital security.
Among its key provisions, the Act prescribes a five-year prison sentence, fines, or both for offences such as the unlawful possession, misuse, forgery, or unauthorised disclosure of National Identification Number (NIN) data and other identity records.
The legislation also introduces stricter sanctions for individuals and organisations found guilty of illegally collecting, accessing, or tampering with citizens’ identity information, while granting authorities broader powers to enforce compliance with Nigeria’s identity management regulations.
The reforms form part of the government’s broader efforts to modernise the country’s identity database, improve public service delivery, and strengthen national security through a more robust and secure digital identity system.
The new law is expected to have far-reaching implications for government agencies, financial institutions, telecommunications companies, and other organisations that rely on Nigeria’s national identity database for verification and service delivery.

