On Friday, 27 June 2026, President Bola Ahmed Tinubu signed the National Identity Management Commission (NIMC) Act 2026 into law, closing a 19-year gap in Nigeria's legal framework for identity management. The old NIMC Act of 2007 was written in a different era, before smartphones, mobile banking, digital lending or the widespread use of the National Identification Number (NIN). That era is now formally over.
For the average Nigerian, this may sound like government paperwork. But if you have ever borrowed money, applied for a loan, opened a bank account, or struggled to prove who you are to a financial institution, this law changes your world. And at CRC Credit Bureau, it changes ours too.
The NIMC Act 2026 does not just update a government agency. It rewires the entire foundation on which credit, identity and trust operate in Nigeria.
What the NIMC Act 2026 Actually Does
At its core, the Act does five things:
It replaces the 19-year-old NIMC Act of 2007 with a modern legal framework built for Nigeria's digital economy.
It reinforces the NIN as the single, foundational identity credential for every Nigerian citizen and resident, under the principle of “one person, one identity.” The new Act also reinforces the provision of the National Credit Reporting Act, 2017.
It designates NIMC as the Root Certification Authority for Nigeria's National Public Key Infrastructure (PKI), placing it at the centre of all digital signatures, encrypted authentication and secure online transactions.
It introduces strict data protection rules, aligning identity management with the Nigeria Data Protection Act (NDPA) and imposing a minimum of five years' imprisonment for unauthorised access to anyone's identity records.
It empowers NIMC to integrate government and private-sector databases so that identity data flows securely and seamlessly across institutions, from banks and credit bureaus to hospitals, insurance, tax, pensions and government agencies.
What It Means to Creditors, Borrowers and the General Public
Here is what the Act means in practical terms for the three groups at the heart of Nigeria's credit ecosystem.
For Creditors: Sharper identity verification means less fraud risk at loan origination. NIN-anchored credit checks reduce the cost of Know Your Customer (KYC) processes. Integrated databases give a more complete picture of a borrower's obligations across lenders. Consent-based data access means fewer regulatory disputes and audit exposure.
For Borrowers: Your NIN becomes the single key to your credit history, no more identity confusion across lenders. Consent rules mean no lender can access your data without your permission. Fraudsters can no longer steal your identity to take out loans in your name as easily. A clean, verified identity opens doors to credit products previously out of reach.
For the Public: One NIN, one verifiable identity, linked to all financial and government services. Personal data is now legally protected with real criminal penalties for breaches. Informal workers and the unbanked can now build verifiable identities and access credit. A General Multipurpose Card will eventually replace the cluster of cards in your wallet.
How It Reshapes Nigeria's Credit Industry
1. Identity is now the foundation of credit decisions
In the past, one of the biggest challenges in Nigerian credit was confirming that the person sitting across the counter, or applying online, was actually who they claimed to be. Multiple IDs, mismatched names, ghost borrowers and recycled identities inflated default rates and made lenders overly cautious. The NIMC Act 2026 changes this by anchoring every financial transaction to a single verified NIN. When identity is certain, credit decisions become faster, cheaper and more accurate.
2. Consent-based data sharing becomes the law, not just the guideline
The Act introduces a clear legal requirement: your personal data cannot be accessed without your consent, and it cannot be used beyond the purpose for which you gave it. For the credit industry, this formalises what responsible lenders and credit bureaus should already be doing and creates enforceable consequences for those who do not. It elevates trust across the entire ecosystem.
3. Database integration unlocks the full picture of borrower obligations
Nigerian borrowers often have obligations spread across banks, microfinance institutions, fintechs, cooperatives and government loan schemes. These databases have historically operated in silos. The Act's mandate for interoperability means that, over time, a credit bureau query linked to a verified NIN could surface a borrower's complete financial obligations, not just what one lender knows. This is a game-changer for credit risk assessment.
4. Financial inclusion gets a legal engine
Millions of Nigerians, including informal traders, rural residents, domestic workers and young people, have been locked out of formal credit not because they are not creditworthy but because they could not prove who they are. The Act creates specific provisions for vulnerable and underserved groups and mandates that they are enrolled in the national identity system. With a verified NIN, they become visible to the financial system and visible means bankable.
5. Fraud becomes significantly harder and more costly
Identity fraud is one of the most expensive problems in the Nigerian financial sector. The Act introduces severe legal penalties for data breaches and unauthorised access, backed by criminal enforcement. Combined with encrypted authentication and the PKI infrastructure, it raises the cost and difficulty of identity fraud to a level that should meaningfully reduce its occurrence.
CRC Credit Bureau has operated at the intersection of identity and credit information for close to two decades. We exist to make the Nigerian credit market work better by ensuring that lenders have accurate, timely and reliable information about borrowers and that borrowers who honour their obligations are rewarded with better access to credit.
The NIMC Act 2026 reinforces the foundation on which we operate. As NIN becomes the universal identifier across both public and private-sector databases, it strengthens the quality and completeness of the credit information CRC holds and shares. It supports our ability to verify the identity of every individual in our database more robustly and reduces the risk of duplicate or fraudulent credit profiles polluting the credit system.
It also aligns with our long-standing commitment to responsible data stewardship. We have always operated under consent-based data access principles; the Act now gives those principles the force of law.
For the financial institutions that are members of CRC's credit information network, the Act creates an opportunity to deepen the accuracy of the data they submit and query. For the millions of Nigerians whose credit histories sit in our database, it is an assurance that their information is held within an ecosystem that now has stronger legal protection than ever before.
Your Next Step
If you do not yet have a National Identification Number, enrol at the nearest NIMC enrolment centre. Your NIN is no longer just a government formality; it is your gateway to financial services, credit history and digital trust in Nigeria's economy.
If you are a lender, financial institution or fintech operator, now is the time to review how NIN verification is integrated into your onboarding, credit assessment and reporting processes and to ensure your data-sharing practices are fully aligned with the NDPA and the provisions of the new Act.