Ho! Ho! Ho! Nothing evokes Christmas quite like data protection.
Test your GDPR knowledge with our festive themed quiz…
It’s Christmas Eve. The DPO at Nakatomi Plaza realises Hans Gruber has stolen a list of containing sensitive personal data of everyone attending the Christmas party. When would this data breach need to be reported by?
Children around the world have been busy posting their letters and personal details to Santa Claus. What lawful basis is Santa Inc. most likely to rely on for processing this information?
"Last Christmas, I gave you my data. But the very next day, you gave it away". What data protection principle might this violate?
On Christmas Eve, Santa Claus receives a DSAR from Kevin McCallister, who’s been unexpectedly left all on his own by his shockingly neglectful parents. Kevin specifically asks for CCTV footage that might identify the dodgy blokes lurking around outside his house. Assuming Santa operates the McCallister’s CCTV system, when does Santa have to comply by?
What’s the correct spelling (UK English)?
The Ghost of Christmas Future holds predictive personal data on Ebenezer Scrooge, but this isn’t explicit in the Ghost’s privacy notice. What is this an example of?
One Christmas, the Prime Minister decides he’s fallen in love with his tea-lady. He looks her record up on the office system, purely for self-interest. Is this a data breach?
The Chief Data Protection Elf at Santa’s Grotto is considering using a third-party AI tool to monitor elf productivity and working hours in the toy workshop. Which of the following should be considered?
Is Santa’s preference for brandy and mince pies personal data?