You might find this to be an interesting and informative take on how a well known non-profit may be responding to GDPR.
https://worldbuilding.stackexchange.com/questions/114033/how-can-santa-keep-his-lists-when-gdpr-is-around
--Tom