Assess processing under the Nigeria Data Protection Act 2023: lawful bases, controller duties, and where the NDPA departs from GDPR-shaped intuitions.