Cross-Border Transfers
Manage and validate cross-border data transfers in compliance with NDPA 2023 Section 41
Overview
The Cross-Border Transfers component provides tools for assessing, documenting, and managing the transfer of personal data outside Nigeria. Under the NDPA 2023, transferring personal data to another country requires that adequate safeguards are in place.
NDPA Section 41 — Transfer of Personal Data
The NDPA 2023 permits the transfer of personal data to a foreign country only where the NDPC has determined that the country or territory ensures an adequate level of protection, or where appropriate safeguards have been provided by the controller or processor, including binding corporate rules, standard contractual clauses, or an approved code of conduct.
Installation
Install the NDPR Toolkit package which includes the Cross-Border Transfer components:
pnpm add @tantainnovative/ndpr-toolkitImport
Import from the main package:
import {
CrossBorderTransferManager,
useCrossBorderTransfer,
validateTransfer,
assessTransferRisk,
isNDPCApprovalRequired,
} from '@tantainnovative/ndpr-toolkit';Components
The Cross-Border Transfers module includes two primary components:
CrossBorderTransferManager
A comprehensive component for assessing, documenting, and managing cross-border data transfers. It evaluates adequacy status of destination countries, identifies required safeguards, and helps maintain compliance records.
import { CrossBorderTransferManager, useCrossBorderTransfer } from '@tantainnovative/ndpr-toolkit';
function TransferManagement() {
const { transfers, addTransfer, getSummary } = useCrossBorderTransfer();
return (
<CrossBorderTransferManager
transfers={transfers}
onAddTransfer={addTransfer}
summary={getSummary()}
/>
);
}API Reference
CrossBorderTransferManager Props
| Prop | Type | Default | Description |
|---|---|---|---|
| transfer | TransferDetails | Required | Details of the proposed data transfer |
| onComplete | (result: TransferAssessmentResult) => void | Required | Called when the assessment is completed |
| showRecommendations | boolean | true | Whether to show safeguard recommendations |
Types
type TransferDetails = {
id: string;
destinationCountry: string;
dataCategories: string[];
purpose: string;
recipient: string;
recipientType?: 'controller' | 'processor';
};
type TransferMechanism =
| 'adequacy_decision'
| 'standard_contractual_clauses'
| 'binding_corporate_rules'
| 'code_of_conduct'
| 'certification'
| 'explicit_consent'
| 'contractual_necessity';
type TransferAssessmentResult = {
transferId: string;
isPermitted: boolean;
mechanism: TransferMechanism;
safeguards: string[];
risks: string[];
assessedAt: string;
};Best Practices
- Assess First: Always complete a transfer assessment before initiating any cross-border data transfer.
- Document Safeguards: Keep records of all safeguards implemented for each transfer, including signed contractual clauses.
- Monitor Adequacy: Regularly check whether destination countries maintain their adequacy status with the NDPC.
- Data Minimisation: Only transfer the minimum personal data necessary for the stated purpose.
- Inform Data Subjects: Your privacy policy should clearly state which countries data may be transferred to and why.