A fintech, clinic app or marketplace in Ghana can no longer treat the national ID card as a photo to be copied: under the National Identity Register (Amendment) Regulations, 2026 (L.I. 2523), the National Identification Authority says visual inspection is "no longer sufficient" and verification must be a real-time biometric check against its database. That turns the national ID system from a document your support team reads into an API your product depends on, with a supplier, an approval process and an outage risk.
This guide is general information, not legal advice. Confirm obligations with the relevant authority and your counsel.
Key takeaways
- ID access is a dependency with its own onboarding. In Ghana, an institution must apply to the NIA, submit regulator and data protection documents, set up technical infrastructure and sign a contract before it gets access.
- Rules are changing in 2026. L.I. 2523 came into effect on 9 June 2026 according to the NIA. The Interior Minister, as reported by the Ghana News Agency, gave institutions a transition period from 27 July to 2 November 2026 and warned of fines, loss of access to the NIA platform and possible licence withdrawal afterwards.
- Ethiopia's Fayda offers biometric eKYC, but public detail is thin. The programme page confirms a 12-digit number, demographic and biometric modalities, and a 2023 legal basis; it gives no registration count.
- Cross-border ID checks are not live. A Benin, Ghana and Rwanda pilot completed Phase 1 on synthetic data only.
What the product needs, and what the state provides
| Product need | Ghana (Ghana Card) | Ethiopia (Fayda) | |---|---|---| | Legal basis | National Identity Register Act, 2008 (Act 750); L.I. 2523 of 2026 | Proclamation 1284/2023 | | Identifier | Ghana Card | 12-digit Fayda Identification Number | | Check available | Real-time biometric verification against the NIA database | Authentication by demographic and biometric data (fingerprint, iris, face); eKYC described as real-time | | Who may call it | Onboarded "user agencies" (businesses and public bodies) | Integrated partners, per a page we could not open | | Scale (stated by the agency) | 20,444,169 enrolled and 19,398,372 cards issued, as at 16 October 2026 | Target of 70 million IDs by end-2025; no count published on pages opened |
Ghana: from copy to call
The L.I. was signed by the Minister on 27 March 2026 under section 73(1) of the National Identity Register Act and came into effect on 9 June 2026, according to the NIA's press release of 16 July. It applies to businesses, ministries, departments and agencies, and any institution that verifies identity as part of its work. Three rules matter for a product team:
- Visual inspection is no longer sufficient.
- Organisations must not "request, photocopy, scan or retain copies of the Ghana Card for identity verification purposes", except where permitted by law (the release does not say which laws).
- Where biometric verification is available, nobody has to present the physical card.
Organisations must "commence onboarding without delay" onto the NIA's Identity Verification System Platform. The NIA release itself gives no deadline and does not mention penalties. The Interior Minister's later remarks, reported by the Ghana News Agency, fill that in: a three-month transition period from 27 July to 2 November 2026 for institutions to buy equipment and integrate, which he said does not suspend the legal obligations. After 2 November he said the NIA would deploy an enforcement team with the police, and that non-compliance can bring fines, imprisonment in some cases, suspension or termination of access to the verification platform, and possible withdrawal of business licences. Neither source says what an institution should do where a biometric check is unavailable.
The access process is on the NIA's identity verification page: request form, document request, review and meeting, then access once the institution's technical set-up is done and a contract is signed. The documents asked for include a business registration certificate, the regulator's licence, a copy of the law that permits the institution to collect personal data, valid data protection certification, an SSNIT certificate, a summary of how the Ghana Card will be used in operations, and a summary of data needs and datasets. The NIA home page reports 20,444,169 people enrolled as at 16 October 2026.
On dates: the L.I. has been in effect since 9 June 2026, and 2 November 2026 is the end of the transition period, not a separate effective date. The Minister's statement is a press report, so confirm the penalty amounts with the NIA or counsel before relying on them.
Ethiopia: a new foundation, thin public detail
Fayda was created under Proclamation 1284/2023 as a "foundational legal ID for Ethiopia", and the page describes "real-time biometric authentication and eKYC for all use-cases". Registration yields a 12-digit identification number delivered by SMS. Identification needs full name, date of birth, gender, nationality and address, plus fingerprint, iris and a face photograph. The programme page states a target of issuing digital IDs to more than 70 million people by the end of 2025. Neither page we opened gave a registration count, a list of integrated partners or the answers to its FAQ on banking use and data sharing.
MOSIP, the open-source identity platform set up at IIIT Bangalore in 2018, lists Ethiopia among 28 country engagements, with 32 engagements and 14 national rollouts overall. The Fayda pages we opened do not mention MOSIP, so this guide does not state which platform Fayda runs on.
Nigeria and Kenya: what could not be confirmed
For Nigeria's NIN and Kenya's Maisha Namba, the identity agencies' pages that could be opened (NIMC's did not return usable text; no Kenyan ID portal could be reached) gave no verifiable KYC rules, enrolment counts or verification fees. This guide therefore does not describe their current KYC requirements. Look at the primary rules directly: the Central Bank of Nigeria's customer due diligence rules and the NIMC for Nigeria, and the Central Bank of Kenya and the relevant registration authority for Kenya.
What the data protection regulators do publish is useful. The Nigeria Data Protection Commission cites section 29 of the Nigeria Data Protection Act 2023 for controller and processor duties, sections 34 to 38 for data subject rights (access, rectification, objection, restriction, portability, erasure, and limits on automated decisions), and runs a registration service plus a published list of controllers and processors of major importance. Kenya's Office of the Data Protection Commissioner regulates under the Data Protection Act 2019. Using a national ID as an identifier makes you a processor of sensitive records in both.
Cross-border: still a pilot
Smart Africa announced on 20 October 2026 that Benin, Ghana and Rwanda had finished Phase 1 of a cross-border identity pilot. It showed end-to-end verification "only with synthetic data in a controlled test environment". The first use case is an e-gate check, with business registration, diploma and vaccination record checks listed as possibilities. Phase 2 prepares a controlled operational pilot subject to national approvals. A company onboarding customers across several countries should plan for one integration per country.
A worked example (hypothetical)
A Lagos-based neobank adds Ghana. In Nigeria it already verifies customers through a national identity route its compliance team knows. In Ghana, it cannot reuse that stack: it needs NIA onboarding as a user agency, its Bank of Ghana licence, a data protection registration, a contract with the NIA and a biometric capture flow on the customer's phone. Its previous practice of storing a photographed card is now contrary to the L.I., unless a law permits retention. The onboarding is partly a product project (the capture flow) and partly a licensing one (the documents), and neither runs on the engineering sprint calendar.
Our reading: the national ID has become the cheapest strong KYC signal where it is reachable, and the longest lead-time dependency where it is not. The strongest counterargument is that mandatory biometric checks can lock out people who cannot enrol or whose fingerprints fail. The NIA release says nothing about fallbacks, which is exactly the question a product team should raise with it.
Buyer guidance
- Ask a partner which ID routes it is approved for, per country, with the approval date and the name of the agency, not a statement that it is "integrated with national ID".
- Ask what happens when verification fails or the register is down: fallback documents, manual review, and who bears the cost of declined customers.
- Check data handling: whether the partner stores ID images (now restricted in Ghana except where permitted by law), where biometric templates sit, and which data protection registration applies.
- Get the regulator's documents in writing: licence, data protection certificate, and the ID agency contract reference.
- For operators: start the ID agency onboarding before the product build, and plan around the 2 November 2026 end of Ghana's transition period and confirm the current enforcement position with the NIA.
- Shortlisting: Find Partner, the fintech category and country pages for Ghana and Nigeria can help build a list of KYC and identity vendors. A profile is a starting point; the approvals above must be confirmed with the company and the agency.
Frequently asked questions
Can I still photocopy a Ghana Card for KYC? Under L.I. 2523, organisations must not request, photocopy, scan or retain copies for identity verification, except where permitted by law. Confirm any exception with the NIA and counsel.
How does a company get access to Ghana Card verification? By applying to the NIA as a user agency: submitting registration, licence, legal basis, data protection and business documents, completing technical set-up and signing a contract.
What is Fayda? Ethiopia's foundational national ID, created under Proclamation 1284/2023, with a 12-digit number and biometric and demographic authentication.
Is there a single African digital ID I can verify against? No. Smart Africa's Benin, Ghana and Rwanda pilot, announced 20 October 2026, has only completed a synthetic-data test phase.
Sources
- National Identification Authority (Ghana), Government Makes Biometric Verification Mandatory for Ghana Card Verification Under New L.I. 2523, 16 July 2026.
- Ghana News Agency, Biometric verification of Ghana Card now mandatory: Interior Minister, July 2026.
- National Identification Authority (Ghana), Identity Verification Services, accessed 23 October 2026.
- National Identification Authority (Ghana), home page, statistics as at 16 October 2026.
- National ID Program Ethiopia, Fayda and About, accessed 23 October 2026.
- MOSIP, home page, accessed 23 October 2026.
- Smart Africa, Benin, Ghana and Rwanda take major step towards cross-border digital identity interoperability, 20 October 2026.
- Nigeria Data Protection Commission, home page, accessed 23 October 2026.
- Office of the Data Protection Commissioner (Kenya), home page, accessed 23 October 2026.