Patrick Wheeler: 'Dear Santa …' - a cautionary data privacy tale

Since Santa Claus had come to the uncomfortable realisation not only the identities of the billions of children worldwide that he held, but also his unique naughty/nice classification of that data were subject to the EU General Data Protection Regulation (GDPR), he had been scratching his beard trying to work out exactly what he should be doing to become compliant. Although the North Pole was outside the EU/EEA, of course, it was still subject to GDPR because of all the EU children whose data he held. The data privacy elves had helpfully put together a data flow analysis to work out exac...