No but he is clear violation of the European Data Protection Directive for sure since data of EU nationals is stored in the NON database presumably at the north pole.
Santa Claus also does not appear to respect the "right to be forgotten" ruling as the gifts just keep coming despite constant unsubscribe and that removal requests.
As the footnote of the article says, he really lives in Finland (I'd say Lappland, but opinions vary).
That's in the EU, so he's fine.
Serious question: Would Santa Claus be subject to HIPAA compliance?
The best way to understand if something is a HIPAA violation is "Can someone who isn't the patient or doctor find any PHI?"
So unless Santa stores health information in his Naught/Nice list, he's HIPAA compliant.
Santa Claus must store some health information about some children that have mental illnesses.
Are 'naughty' and 'nice' slated to be recognized conditions in the DSM-VI?
No, but they will certainly be in the BDSM-VI.
Serious question: Was that really a serious question?
Unless Santa has diversified rather far afield, I'm pretty sure his enterprise does not meet the definition of a Covered Entity[1].