By Patrick Wheeler

It had been quite a year for the keepers of that vast, ever-changing database held in that ever-so-secure environment right by the North Pole. Since Santa Claus had come to the uncomfortable realisation that not only the identities of the billions of children worldwide that he held, but also his unique naughty/nice classification of that data were subject to the EU General Data Protection Regulation, he had been scratching his beard trying to work out exactly what he should be doing to get compliant. Although the North Pole was outside the EU/EEA it was still subject to GDPR because of all the EU children whose data he held.

The data privacy elves had helpfully put together a data flow analysis to work out exactly what personal data they were holding and what it was being used for. Fortunately, Santa would never allow any of his data to be exported for use by anyone else.