A controller or processor does not transfer or permit the transfer of personal data from Nigeria to another country unless the recipient is subject to a law, binding corporate rules, contractual clauses, code of conduct or certification mechanism affording an adequate level of protection in accordance with the Act, or one of the section 43 conditions applies; the controller or processor records the basis for each transfer and the adequacy of protection under section 42; the Commission may by regulation require notification of the measures in place with an explanation of their adequacy, and may designate categories of personal data subject to additional transfer restrictions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.