In short
Data minimization is the privacy principle that an organization should collect, use and keep only the personal data that is adequate, relevant and necessary for its stated purposes.
Key takeaways
- It reduces the harm from any breach.
- It works alongside purpose limitation and storage limitation.
- It is required by privacy laws such as the European Union's General Data Protection Regulation.
Where it's tested
ISC: Privacy & Regulatory Frameworks — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
The privacy principle of data minimization requires an organization to: