NIA begins enforcement of Ghana Card biometric verification rules, warns institutions of fines

The National Identification Authority (NIA) in Ghana has initiated enforcement of the National Identity Register (Amendment) Regulations, 2026 (L.I. 2523), imposing potential fines of up to 2,000 penalty units on institutions that fail to comply with the new requirements. Following a three-month grace period, the NIA has deployed a Biometric Verification Implementation Task Force to inspect institutions and ensure adherence to the regulations.

William Ampomah Emmanuel Darlas, the NIA's Corporate Affairs representative, announced the enforcement phase in a press briefing in Accra on November 2, 2026. The regulations stipulate that institutions verifying identities must utilize the NIA's approved biometric verification platform instead of visual inspections of the Ghana Card. Unauthorized practices, such as photocopying, scanning, or retaining copies of the Ghana Card, are prohibited.

The NIA representative clarified that institutions are not required to obtain new Ghana Cards or capture biometric data, as the existing card contains the necessary information. The biometric verification process will rely on data already captured during Ghana Card registration, including fingerprints, iris details, and facial features.

Darlas warned institutions against engaging third-party companies or individuals to access the NIA's verification platform, emphasizing that the Authority does not collaborate with intermediaries. Institutions must directly engage with the NIA and undergo an official onboarding process, which includes proving legal registration, obtaining Data Protection Commission certification, and establishing a connection to the platform via the NIA's technical team.

Subletting access to other businesses is strictly prohibited, and the NIA has received reports of such activities, threatening legal action against violators. Institutions found in violation of the regulations may face fines ranging from 500 to 2,000 penalty units and additional administrative measures, including denial of access to the verification platform.

Telecommunications companies can still employ the match-on-card method, matching customers' fingerprints against biometric data stored on the card's chip. Banks and other institutions connected to the NIA's platform via Application Programming Interface (API) can verify customers using their Ghana Card numbers. The NIA stressed that institutions must protect customer personal information in compliance with the Data Protection Act, 2012 (Act 843), as failure to do so could result in loss of access to the verification platform and other legal consequences.