The law is signed. The commission has its expanded mandate. And 43.1 million displaced Africans — generating an estimated $27 billion in annual income — are still waiting for a financial system that can see them Source: Business Day.
President Bola Tinubu's signing of the National Identity Management Commission Act 2026 is being received as a governance modernisation milestone — the first overhaul of Nigeria's digital identity legislation in 19 years Source: Nairametrics. That framing is accurate but insufficient. The more consequential question is not what the law grants NIMC, but what it requires of everyone else: banks, fintechs, mobile money operators, and the CBN-regulated ecosystem that will determine whether 'digital identity authority' becomes an open infrastructure or a new tollgate.
No public implementation roadmap has emerged. No API standards. No fintech licensing pathway. No timeline for integration with the banking system. NIMC's expanded powers are confirmed; the architecture through which those powers translate into accessible, verifiable identity services for unbanked Nigerians is not.
This is the structural failure pattern Africa knows well. Ghana's Ghana Card rollout granted the NIA sweeping registration powers but left interoperability with the banking system to bilateral negotiation — a process that took years and still favours established banks over challenger fintechs. Kenya's Huduma Namba exercise collapsed under legal challenge precisely because the enabling framework arrived after the political announcement. Tanzania and Uganda have both enacted digital identity laws that remain only partially implemented because no one resolved the API governance question before the ink dried.
Nigeria is repeating the sequence.
The displacement income angle makes the stakes concrete. Of the $27 billion generated annually by Africa's displaced population, Nigeria's displaced communities account for approximately $300 million Source: Business Day. This is not an edge case — it is a market segment that existing financial institutions actively exclude because identity verification fails at the point of onboarding. A functional NIMC digital identity layer, one that fintechs can query in real time through open, standardised APIs, would crack this market open. The question worth asking directly: is that $27 billion figure the actual business case driving the legislative priority, and if so, why has the fintech sector apparently not been brought into the implementation design?
The incumbent-capture risk is not hypothetical. Nigerian banks hold disproportionate regulatory leverage in any identity data negotiation. If NIMC's data-sharing arrangements are left to private bilateral agreements rather than mandated open APIs, the tier-one banks — Access, GTB, Zenith, First Bank — will negotiate integration terms that smaller fintechs cannot match. That outcome would make NIMC a competitive moat for incumbents, not an inclusion tool for the ecosystem. It would replicate, under a new legal dress, exactly the dynamics that have kept mobile money penetration in Nigeria well below the levels achieved in Kenya, Ghana, and Tanzania despite Nigeria's far larger population.
The CBN's parallel role here matters and remains unaddressed. The NIMC Act expands the commission's authority over identity infrastructure, but payments sit under CBN jurisdiction. How these two regulatory bodies will govern shared data flows — particularly for KYC processes where identity verification and payment authorisation intersect — is a coordination question that the law, as publicly reported, does not answer.
For Nigerian fintech founders, the honest read is this: a legal upgrade without implementation architecture is a promissory note, not a market opening. The NIN linkage mandate already demonstrated that NIMC can enforce compliance; it also demonstrated that enforcement without operational clarity produces chaos — mass SIM deactivations, platform disruptions, regulatory reversals. The 2026 Act has more teeth. The implementation gap is the same.
Tinubu's administration deserves credit for updating 19-year-old legislation. It will earn a different kind of recognition if the next instrument signed is a fintech integration framework with open API requirements, published timelines, and a dispute resolution mechanism that does not default to whoever has the most lawyers in the room. Until then, NIMC 2026 is a law with a mandate and no map.