The National Identity Management Commission (NIMC) has been formally designated as Nigeria's Root Certification Authority (Root CA) under the NIMC Act 2026, a move that places the commission at the centre of the country's digital trust infrastructure and carries significant implications for businesses, banks, government agencies, and everyday Nigerians.
The new law, which replaces the 2007 NIMC Act, expands the commission's role beyond issuing and managing identities. NIMC is now responsible for verifying electronic identities and supporting the certification framework for digital signatures linked to the National Identification Number (NIN). This positions NIMC at the top of the infrastructure used to establish trust in digital transactions, according to a report by TechCabal.
What the New NIMC Role Means
A digital signature allows a person or organisation to authenticate an electronic document and demonstrate that it has not been altered after signing. Under the new law, NIMC is responsible for validating the cryptographic certificates underpinning digital signatures, secure online transactions, and identity verification across both the public and private sectors.
The commission will serve as the national “trust anchor” within Nigeria's Public Key Infrastructure (PKI), a system that enables organisations to verify digital identities and secure electronic communications. In practical terms, banks, businesses, and government agencies using trusted digital certificates could ultimately depend on the framework established by NIMC.
For businesses, this could strengthen the security of online contracts, customer verification, electronic transactions, and other digital services. For banks, it could further integrate NIN-based identity verification into digital financial services.
Why Businesses Could Face New Compliance Rules
The development, however, has created a potential clash with Nigeria's long-awaited National Digital Economy and E-Governance Bill. The proposed legislation contains extensive provisions on electronic signatures and digital government services. It would recognise qualifying electronic signatures as legally valid where they are uniquely linked to the signer, remain under the signer's control, and allow subsequent alterations to be detected.
The bill also proposes that digital signatures used for government and commercial transactions be linked to an individual's NIN, with identity verification carried out through secure connections to NIMC's database. This creates significant overlap with the new NIMC Act.
While the NIMC Act places the Root Certification Authority function under NIMC, the Digital Economy Bill gives the National Information Technology Development Agency (NITDA) regulatory and accreditation responsibilities over electronic-signature Certification Authorities. Without clearer coordination, businesses and technology companies could face uncertainty over which agency has ultimate authority over different parts of Nigeria's digital trust ecosystem.
What It Could Mean for Bank Customers
For bank customers, the biggest long-term implication is the deeper integration of digital identity into financial services. As NIMC becomes central to digital authentication, banks and other financial institutions could increasingly rely on NIN-linked systems for identity verification and secure digital transactions.
This could make online banking, account opening, electronic documentation, and other financial services more secure and easier to authenticate. However, the effectiveness of the system will depend on how seamlessly NIMC's infrastructure connects with financial institutions and other authorised organisations.
Digital Economy Bill Faces a Fresh Test
The Digital Economy and E-Governance Bill has been in development for years and seeks to accelerate paperless government, electronic records, and legally recognised digital transactions. Its passage could now require lawmakers to reconcile its provisions with the already enacted NIMC Act.
Policy experts have warned that overlapping laws could create regulatory uncertainty and slow implementation if responsibilities are not clearly defined. The central issue is therefore no longer whether Nigeria will build a digital identity and electronic-signature framework. The NIMC Act has already established a major part of that architecture, according to a report by TechCabal.
The challenge now is ensuring that the country's digital laws work together rather than create competing regulatory structures. For Nigerians, businesses, and banks, the outcome could determine how smoothly NIN-based digital identity becomes embedded in everyday transactions and Nigeria's broader push towards a paperless economy.
