“processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”
Case closed.
Many people don’t realize you can request all the data Santa has on you. It’s honestly pretty shocking.
At least in the UK, he’s compliant with his personal data privacy policy.
https://www.royalmail.com/sites/royalmail.com/files/2021-10/Santa-Mail-Privacy-Notice-2021-Final.pdf
Taken from:
I think we can assume most non bs laws should allow legitimate good deeds
You are allowed to store info that is required to provide your service as long as the customer is aware of it.
People just don’t understand the law tbh.
And Santa has a month long awareness campaign every December with hit infomercial songs. So I think he’s Gucci
He may have good intentions, but if Santa gets hacked, that could ruin your life.
According to https://www.noradsanta.org/en/sleighinformation, Santa travels at a speed faster than starlight.
If you were in the South Pole, it would take Santa less than a tenth of a second to reach you
Are you sure you want to hack someone that knows everything you did bad, can reach you anywhere you are on earth in less than a tenth of a second and can break into billions of houses in a single night without anyone noticing him?
I mean, what’s he going to do? Give me a lump of coal? Evidently, the guy isn’t using his superpowers effectively to combat crimes.
Besides, it’s not like modern hacking specifically targets people. If the guy is running Apache HTTP server v0.7, because that was state-of-the-art in 343 A.D., then you’d have to actively exclude Santa’s IP range, lest your automatic vulnerability scanning will have him hacked without you even knowing about it.
Santa has world class ICE at the North Pole. And cooling is very cheap there, so he gets a lot of extra performance out of his hardware.
To add to the approved reply:
The GDPR has some other requirements to it, such as an EU-based representative being necessary for operating in the EU, allowing users to request data updates, and getting consent for data collected
You could make the argument that the mall Santas aren’t authorized representatives of real Santa, as they are hired by malls with no supervision from the North Pole administration. Thankfully this doesn’t matter, because Santa himself is a resident of Finland, an EU country, which is also where his business is located. Chistmas is saved, everyone.
GDPR does not apply to individuals.
