In this episode, Victoria talks about the lawful basis for processing data, as provided by the EU GDPR. The 6 lawful basis are:

consent fulfilling contractual obligations fulfilling legal obligations vital interest public interest legitimate interest

The Nigerian NDPR provides for all the above basis except legitimate interest. However, the Guidelines for the Management of Personal Data by Public Institutions in Nigeria refers to legitimate interest of the data subject. The GDPR speaks only of legitimate interest of the data controller.  Victoria sheds light on all these and more. She also provides the answer to the question asked in the first episode about the first country to enact a data protection law. You can connect with Victoria on LinkedIn and on Twitter