I'm also concerned about Santa's collection of peoples' private data - e.g., whether individual children are "naughty" or "nice" - without allowing them to review the data for correctness, dispute the accuracy, request a change, or request deletion.
Top-level
I'm also concerned about Santa's collection of peoples' private data - e.g., whether individual children are "naughty" or "nice" - without allowing them to review the data for correctness, dispute the accuracy, request a change, or request deletion. 3 comments
@mkj let's not forget Article 8, and whether the parents have given their consent for Santa to process the data of underage children... |
@cazabon @beyondmachines1 For his European operations, I strongly suspect that Santa is operating under GDPR article 6 section 1 paragraphs (b) necessary for performance of contract, and/or (d) necessary to protect vital interests of data subject, and/or (e) necessary for performance of task carried out in public interest.
He also has plenty of workers with whom complaints can be lodged or additional information filed. Surely they can handle a deletion request too.
#Santa #SantaClaus #GDPR