By Lemmy Ughegbe, Ph.D
When President Bola Ahmed Tinubu signed the new National Identity Management Commission Act into law, newspaper headlines understandably focused on the event itself. Yet, as is often the case with legislation, the ceremony received more attention than the substance. Many Nigerians know that a new law now exists. Far fewer understand what has actually changed or why those changes matter to them.
That is unfortunate because this is not merely an amendment to an existing statute. It is a comprehensive modernisation of Nigeria’s identity management framework, designed to prepare the country for a future in which trusted digital identity will increasingly underpin governance, commerce, security and public service delivery.
The first and perhaps most fundamental change is that the new legislation replaces a legal framework enacted in 2007. At the time, smartphones were still relatively uncommon, digital banking was in its infancy, electronic commerce was limited and artificial intelligence belonged largely to academic discussion. Today, Nigerians live, work, transact and communicate in an entirely different environment. The law governing identity management therefore had to evolve alongside society itself.
The new Act responds to that reality by expanding the statutory objectives of the Commission. Identity management is no longer viewed simply as registration and record keeping. The legislation expressly embraces digital identity, inclusion, accessibility, stronger data protection, efficiency and alignment with international best practice. That shift in emphasis reflects a broader understanding that identity has become a strategic national asset rather than merely an administrative requirement.
One of the most important innovations is the designation of the National Identity Management Commission as Nigeria’s Root Certification Authority for the National Public Key Infrastructure. While this may sound highly technical, its practical significance is considerable. In simple terms, it provides the legal foundation for secure digital authentication, electronic trust services, digital signatures and protected online transactions. In an era where governments, businesses and citizens increasingly interact electronically, these capabilities are indispensable.
Closely connected to this is the Commission’s central role within Nigeria’s Digital Public Infrastructure. Around the world, governments are investing in Digital Public Infrastructure because it enables secure identity verification, trusted digital payments and reliable data exchange. Together, these systems improve public administration, stimulate innovation and expand access to essential services. By embedding NIMC within this framework, the new Act positions identity at the heart of Nigeria’s digital transformation.
Another significant reform is the reinforcement of the National Identification Number under the principle of One Person, One Identity. This is much more than an administrative slogan. It seeks to eliminate duplicate identities, improve coordination across government institutions and reduce opportunities for fraud. A trusted identity system benefits honest citizens by making public services more efficient while strengthening confidence in financial and commercial transactions.
The legislation also reflects growing recognition that identity and privacy must advance together. It strengthens the legal framework for protecting personal information and aligns identity management more closely with the Nigeria Data Protection Act. This is particularly important because public confidence depends not only on efficient registration but also on assurance that personal information will be managed securely, professionally and responsibly.
Another area that deserves attention is enforcement. The new Act strengthens investigative powers and significantly increases penalties for identity related offences. Identity fraud, impersonation and other abuses are no longer treated as minor administrative infractions. The message is clear: as identity becomes more valuable, protecting its integrity becomes more important. Stronger sanctions are intended not simply to punish offenders but also to safeguard public confidence in the system.
The legislation also broadens the range of transactions and services for which the National Identification Number is required. Some critics may view this as expanding bureaucracy. A more balanced perspective is that as identity becomes the foundation of digital governance, its use naturally extends across more areas of national life. Banking, taxation, pensions, insurance, healthcare, education, business registration and social welfare increasingly depend upon reliable identity verification. Rather than creating unnecessary obstacles, the objective is to ensure consistency, reduce duplication and improve efficiency across institutions.
The reconstitution of the Commission’s governing board is another noteworthy reform. By widening representation across relevant institutions, the Act seeks to strengthen policy coordination and oversight. Identity management is no longer the responsibility of one agency alone. It intersects with finance, communications, immigration, security, taxation, education and many other sectors. Broader institutional collaboration therefore becomes essential.
Ultimately, the true significance of the new National Identity Management Commission Act lies not in any single provision but in the philosophy that underpins the legislation. It recognises that identity is no longer simply proof of who we are. It is the foundation upon which governments deliver services, businesses establish trust and citizens participate confidently in an increasingly digital society.
The challenge now shifts from legislation to implementation. Modern technology, professional administration, strong cybersecurity, effective data protection and sustained public engagement will determine whether the promise of the Act becomes reality. Laws create possibilities. Institutions transform societies.
History will not judge this legislation by the day it was signed into law. It will judge it by whether it strengthens governance, expands opportunity and improves the daily lives of Nigerians. If faithfully implemented, the new National Identity Management Commission Act may one day be remembered not simply as another Act of Parliament, but as one of the reforms that helped prepare Nigeria for the digital century.
Lemmy Ughegbe, FIMC, CMC
Email: lemmyughegbeofficial@gmail.com
WhatsApp ONLY: +2348069716645
