In the absence of adequate protection a controller or processor transfers personal data from Nigeria only where the data subject has provided and not withdrawn consent after being informed of the possible risks due to the absence of adequate protection; the transfer is necessary for a contract with the data subject or pre-contractual steps at their request; the transfer is for the sole benefit of the data subject and consent is not reasonably practicable to obtain but would likely be given; the transfer is necessary for important reasons of public interest, for legal claims, or to protect the vital interests of a data subject or other person incapable of giving consent. No international or multinational transfer code, rule or certification mechanism is adopted as a Nigerian standard without the approval of the National Assembly.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.