Does Santa Claus comply with the EU's General Data Protection Regulation (GDPR)?
How should Santa Claus, a figure who obtains the personal information of children through methods unimaginable to ordinary people, violates the airspace of various countries, and invades homes to hand out presents, deal with modern laws and regulations? There was a discussion on ``Stack Exchange'', a Q&A site for software engineers, as to whether this is a bad idea.
internal consistency - How can Santa keep his lists when the GDPR is around? - Worldbuilding Stack Exchange
The topic posted on Stack Exchange by a certain user is ``How will Santa deal with the EU's
The EU's GDPR is a law that stipulates the handling of personal information of people living in the EU, and it strictly restricts the transfer of personal information outside the EU and requires clarification on the processing of personal information. Under GDPR, when someone collects a child's personal information, the parent or guardian must consent to the purpose for which the information is collected and used.
The poster for this topic said, ``Santa, or the elves, doesn't tell me that they're collecting information about me: my personal information, my address, whether I was a good or bad child. , all of this is personal information,'' he said, expressing concern that now that GDPR has come into effect, Santa will no longer deliver presents.
Surprisingly, there is a view on this issue that Santa is compliant with the law.
First of all, as the song ``Santa is coming to town'' suggests, it is clear that Santa is active in the city (EU).
The song's lyrics say, 'He makes a list, then checks it twice. Who's naughty and who's good?' which some say shows Santa's legitimate purpose for data collection. There is also.
The song goes on to say, 'He watches you sleep. He knows when you're awake. He knows whether you've done something bad or good. So be good.' This is an example of what kind of data is being collected.
GDPR also requires other requirements such as ``requires an EU-based representative to conduct business in the EU'' and ``allows users to request data updates.'' There is a view that this is properly compliant, as people can meet Santa if they go to a shopping mall during the holiday season, and they can easily update their data (whether they are doing well or not).
Regarding the point that children must obtain consent from their parents or guardians regarding their children's information, children are usually told by their parents, ``If you don't be a good child, you won't get presents from Santa!'' Therefore, it has been pointed out that parents are fully consenting to providing information about their children to Santa.
Based on these opinions, there was also an opinion that ``Santa's information collection method is more transparent than other companies.''
Additionally, the GDPR provides an exemption that allows 'churches and other organizations with religious purposes' to process sensitive data in the course of legitimate activities and with appropriate safeguards in place. A system is in place. It is said that Santa is modeled after St. Nicholas, a former Christian bishop, so some comments suggested that this might apply to Santa as well.
Related Posts:
in Video, Posted by log1p_kr