Santa's List

He’s making a list

He’s checking it twice

He’s gonna find out who’s naughty or nice…

…but is Santa Claus is in contravention of Article 4 of the General Data Protection Regulations?

So we flew all the way to the North Pole with help from a friendly polar bear, to ask FC and no thanks to some prankster penguins, we tracked him down to get his answer. Father Christmas said that the Elves has been busy back in 2018 pulling together the North Pole Legitimate Interest Assessment, with some guidance from the ICO website and was therefore processing childrens’ personal data using Legitimate Interest as their main legal bases.

Parents of the boys and girls all know why FC uses their data, so he can use it to help decide who's been naughty or nice, allowing him to deliver presents on Christmas Day.

It’s certainly a process that seems to work well as we know that almost all children will receive gifts at Christmas, with only a few naughty ones wondering why they were missed out and whether their personal data was processed at the North Pole.

When FC and the Elves finish working through all the letters, they are filed safely in the North Pole so that they can be sure not to contravene any global Data Privacy regulations.

Attached Media

About ConsentEye

Paul Tarantino founded ConsentEye in 2017 after seeing many Enterprise businesses spending double digit millions of pounds building their own consent management/realtime decision engines to manage customer preferences in line with new Data Privacy Regulations. There was nothing available off-the-shelf at that time so with a career working at the cutting edge of IT helping global CXO's fix business issues with technology he decided to build a world class consent lifecycle management system for organisations that needed a solution fast, for an affordable price to comply with the GDPR. It is was the first GDPR compliant Consent Lifecycle Management Cloud Platform. ConsentEye enables organisations to comply with the GDPR, enables their customers to withdraw consent and increase efficiencies by centralising all consent captured across multiple systems and applications.