Data minimization explained

Data minimization is the principle of collecting, processing and storing only the necessary amount of personal information required for a specific purpose. The principle emanates from the realisation that processing unnecessary data is creating unnecessary risks for the data subject without creating any current benefit or value. The risks of processing personal data vary from identity theft to unreliable inferences resulting in incorrect, wrongful and potentially dangerous decisions.

The principle of data minimization is a global, universal principle of data protection, and can thus be found in almost every legal or regulatory text on data protection/privacy.

The data minimization principle in regulatory texts worldwide (selection)

Notes and References

  1. Web site: EUR-Lex – 32016R0679 – EN – EUR-Lex. eur-lex.europa.eu.
  2. Web site: Principle (c): Data Minimisation. ico.org.uk.
  3. Web site: OECD Privacy Guidelines.
  4. Web site: Dumiak . Matt . Federal Privacy Bill: Breaking Down the ADPPA . JD Supra . 2022-06-24 . en . 2022-07-30 . mdy-all . June 25, 2022 . https://web.archive.org/web/20220625161839/https://www.jdsupra.com/legalnews/federal-privacy-bill-breaking-down-the-9181745/.
  5. Web site: APEC Privacy Framework (2015).
  6. Web site: American Privacy Rights Act Section-by-Section Summary by the United States Senate Committee on Commerce, Science, & Transportation .
  7. Web site: Personal Information Protection and Electronic Documents Act.
  8. Web site: PIPEDA fair information principles.