What's involved in changing the ownership of generic top level domain? Is there usually fees? Does the whois protection need to be turned off whilst transfer is done so for that small period is when the aggressive marketers can snatch your contact details?
Transfer it to the other person to a different registrar or see if your registrar allows internal transfers.
I've done this before and for me the answers to your questions were, no fees (internal transfer, transferring to another registrar is usually an additional year renewal) no need for whois protection to be turned off.