Santa's data collection has always been compliant with GDPR, so he has no need to change his ways. The nature of his data collection has always been transparent, and he is open to updating his records if you contact one of his representatives.


For example, he makes it clear that he is operating in your town:

> You better watch out

> You better not cry

> Better not pout

> I'm telling you why

> **Santa Claus is coming to town**

The purpose of his data collection is to create a list of those who are naughty and nice this year:

> **He's making a list**

> And checking it twice;

> **Gonna find out Who's naughty and nice**

> Santa Claus is coming to town

He even gives some examples of what data he's collecting:

> He sees you when you're sleeping

> **He knows when you're awake**

> **He knows if you've been bad or good**

> So be good for goodness sake!


----------

The GDPR has some other requirements to it, [such as an EU-based representative][2] being necessary for operating in the EU and allowing users to request data updates. 

Thankfully for Santa, he's been operating compliant representative systems for decades: Just go to any mall during the holiday season to meet with [a representative][3]. To ensure open and accurate records, the representative ask the child if they've been naughty or nice that year and what type of present they want. 

As long as the child's parent/legal guardian is nearby to confirm the data change requests, Santa will be happy to update his database to ensure the naughty/nice data is accurate and that the requested presents are delivered.


  [1]: https://worldbuilding.stackexchange.com/questions/31987/how-does-santa-protect-himself-from-ip-lawsuits
  [2]: https://politics.stackexchange.com/questions/30509/how-are-gdpr-fines-actually-enforced-for-us-companies-with-no-physical-presence/30513#30513
  [3]: http://tvtropes.org/pmwiki/pmwiki.php/Main/MallSanta