Nigeria enacts NIMC Act 2026, elevating identity agency to digital trust authority
Nigeria has enacted legislation formally designating the National Identity Management Commission as the country's digital trust authority, embedding public key infrastructure responsibilities into its mandate. The law reshapes Nigeria's digital public infrastructure stack with direct implications for fintech KYC compliance, payments, and e-government service delivery. The move follows the broader NIMC Act 2026 passed on 1 July and adds regulatory depth to Nigeria's national identity architecture.
NIMC 2026: a single point of failure dressed as a foundation
Making NIMC the Root Certification Authority — the top of the chain that validates every digital certificate in Nigeria — is a genuinely bold architectural choice. Every secure transaction, every verified identity, every government service now traces back to one institution.
That is exactly the kind of foundational infrastructure a serious digital economy needs. It is also a single point of failure.
The law concentrates identity management, authentication and digital trust inside one commission. The article is honest about what follows: the whole model's effectiveness depends on subsidiary regulations that haven't been written yet. Build the roof before the walls are up, and the question isn't whether the ambition is real — it's whether the institution can hold the weight.
2 sources
- Nigeria Makes NIMC Digital Trust Authority · cioafrica.co · T2
- Nigeria’s new identity law turns NIMC into the country’s digital trust authority · techcabal.com · T1