Data Minimization Principle
A foundational concept in privacy protection requiring data controllers to collect and process only the minimum data necessary to achieve a specific purpose and to delete it promptly once that purpose is fulfilled. It is enshrined in the EU GDPR and some US state-level privacy laws.
Timeline (last 90 days)
The principle of data minimization requires that collected personal data be adequate, relevant and limited to the minimum scope necessary for the purpose of processing.
There is an inherent tension between the principle of data minimization and audit traceability: audits require evidence, while minimization requires storing less data.
All Facts (2)
The principle of data minimization requires that collected personal data be adequate, relevant and limited to the minimum scope necessary for the purpose of processing.
50%UnverifiedThere is an inherent tension between the principle of data minimization and audit traceability: audits require evidence, while minimization requires storing less data.
50%