Create a bespoke document in minutes, or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
International Data Transfer Agreement
"Need an International Data Transfer Agreement for my Nigerian fintech company to transfer customer payment data to our cloud service providers in Ireland, with implementation planned for March 2025 and specific emphasis on financial data security compliance."
1. Parties: Identification of the data exporter and data importer, including their registered addresses and authorized representatives
2. Background: Context of the agreement, relationship between parties, and purpose of the data transfer arrangement
3. Definitions: Definitions of key terms used in the agreement, including technical terms and those defined in Nigerian Data Protection Act
4. Scope and Purpose of Transfer: Detailed description of the categories of data being transferred, purpose of transfer, and processing activities
5. Obligations of Data Exporter: Responsibilities and warranties of the data exporter, including compliance with Nigerian data protection laws
6. Obligations of Data Importer: Responsibilities and warranties of the data importer, including data protection measures and processing limitations
7. Data Security Measures: Specific technical and organizational security measures required to protect the transferred data
8. Data Subject Rights: Procedures for handling data subject requests and ensuring data subject rights are protected
9. Breach Notification: Procedures and timeframes for reporting and handling data breaches
10. Audit Rights: Rights of the data exporter to audit the data importer's compliance with the agreement
11. Duration and Termination: Term of the agreement, renewal provisions, and circumstances for termination
12. Governing Law and Jurisdiction: Specification of Nigerian law as governing law and jurisdiction for disputes
13. General Provisions: Standard contractual terms including severability, entire agreement, and amendments
1. Sub-processing: Terms governing the appointment and oversight of sub-processors, used when the data importer may need to engage other parties
2. Data Retention and Deletion: Specific requirements for data retention periods and deletion procedures, included when specific retention requirements exist
3. Insurance Requirements: Specific insurance obligations for data protection, included for high-risk or high-value transfers
4. Force Majeure: Provisions for unforeseen circumstances, included when dealing with critical data transfers
5. Special Categories of Data: Additional provisions for sensitive personal data, included when transferring special categories of data
6. Costs and Compensation: Allocation of costs and compensation arrangements, included when there are significant costs involved
7. Local Representative: Appointment of local representatives, included when required by applicable laws
1. Schedule 1 - Description of Transfer: Detailed description of the data transfer including data categories, subjects, processing purposes, and frequency
2. Schedule 2 - Technical and Security Measures: Detailed specification of security measures, encryption standards, and technical requirements
3. Schedule 3 - Authorized Sub-processors: List of approved sub-processors and their roles, if applicable
4. Schedule 4 - Data Processing Activities: Detailed description of all processing activities to be carried out
5. Appendix A - Contact Points: List of key contacts for operational, technical, and legal matters
6. Appendix B - Standard Contractual Clauses: If applicable, incorporation of standard contractual clauses recognized under Nigerian law
7. Appendix C - Transfer Impact Assessment: Assessment of risks and safeguards for the specific transfer arrangement
Authors
Applicable Data Protection Laws
Authorized Personnel
Confidential Information
Controller
Data Breach
Data Exporter
Data Importer
Data Protection Authority
Data Protection Impact Assessment
Data Protection Laws
Data Subject
Data Subject Rights
Effective Date
NDPA
Nigeria Data Protection Act 2023
Personal Data
Personal Data Breach
Processing
Processor
Recipient
Restricted Transfer
Security Measures
Sensitive Personal Data
Services
Special Categories of Personal Data
Sub-processor
Technical and Organizational Measures
Third Country
Third Party
Transfer
Transfer Impact Assessment
Transferred Data
Unauthorized Access
Scope of Agreement
Data Protection Obligations
Transfer Mechanisms
Security Requirements
Confidentiality
Data Subject Rights
Sub-processing
Audit Rights
Breach Notification
Liability
Indemnification
Warranties
Duration and Termination
Force Majeure
Assignment
Severability
Governing Law
Dispute Resolution
Data Retention
Compliance with Laws
Technical Safeguards
Reporting Requirements
Cross-border Transfer
Amendment
Entire Agreement
Notices
Representatives
Insurance
Survival
Financial Services
Healthcare
Technology
E-commerce
Telecommunications
Professional Services
Manufacturing
Education
Research and Development
Pharmaceutical
Insurance
Banking
Consulting
Business Process Outsourcing
Cloud Services
Legal
Compliance
Information Technology
Information Security
Risk Management
Operations
Data Protection
Privacy
International Business
Procurement
Vendor Management
Chief Legal Officer
Data Protection Officer
Privacy Manager
Compliance Officer
Legal Counsel
IT Director
Chief Information Security Officer
Risk Manager
Operations Director
Chief Technology Officer
Information Security Manager
Privacy Analyst
Compliance Manager
Contract Manager
International Business Development Manager
Find the exact document you need
Sub Processor Agreement
A Nigerian law-governed agreement establishing terms and conditions for sub-processing personal data, ensuring compliance with Nigerian data protection regulations.
Data Protection Contract
A Nigerian law-governed Data Protection Contract establishing data processing obligations and compliance requirements between controllers and processors.
Data Controller Agreement
A Data Controller Agreement compliant with Nigerian data protection laws (NDPR 2019), establishing data processing frameworks and controller obligations.
Data Processing Addendum DPA
A Nigerian law-compliant Data Processing Addendum establishing terms for processing personal data, aligned with the Nigeria Data Protection Act 2023.
International Data Protection Agreement
A Nigerian law-governed agreement for international transfer and processing of personal data, ensuring NDPR compliance and cross-border data protection.
Intra Group Data Transfer Agreement
Nigerian law-governed agreement regulating intra-group data transfers in compliance with the Nigeria Data Protection Act 2023.
Intercompany Data Processing Agreement
A Nigerian law-governed agreement regulating data processing activities between affiliated companies within the same corporate group, ensuring NDPA 2023 compliance.
DPA Agreement
A Nigerian law-compliant Data Processing Agreement establishing data handling responsibilities between controller and processor under NDPR 2019.
Third Party Data Processing Agreement
A Nigerian law-governed agreement establishing terms for third-party processing of personal data in compliance with NDPR requirements.
Personal Data Transfer Agreement
A Nigerian law-compliant agreement governing personal data transfers between parties, aligned with NDPR 2019 requirements.
Affiliate Addendum
A Nigerian law-compliant addendum governing affiliate relationships, including commission structures and regulatory compliance requirements.
International Data Transfer Agreement
Nigerian-law governed agreement for regulating international transfers of personal data, ensuring compliance with the Nigeria Data Protection Act 2023.
Download our whitepaper on the future of AI in Legal
Genie’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; Genie’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our Trust Centre for more details and real-time security updates.
Read our Privacy Policy.