What is data minimization?

• A. Store data indefinitely regardless of purpose.
• B. Share data with third parties without consent.
• C. Collect only what is necessary for the stated purpose and avoid excess data collection.
• D. Collect all possible data from every user.

Answer: (C)

Data minimization is about collecting only what is necessary to achieve a specific, stated purpose and nothing more. It reduces privacy risks, makes data handling simpler, and helps meet legal expectations around collecting only what you truly need. The option that says to collect only what is necessary for the stated purpose and avoid excess data collection perfectly embodies this idea. For example, if you’re collecting information to send a newsletter, you should only gather an email address and possibly consent, not extra details like birth dates or home addresses.

Storing data indefinitely, sharing data with third parties without consent, or collecting all possible data from every user all go beyond what’s needed, increasing risk and clutter without added value.