Data Minimization

Short answer

Data minimization is the privacy principle of collecting and keeping only the personal data necessary for a specified purpose. It is a core requirement of GDPR and appears in several US state privacy laws. Limiting data reduces breach risk, compliance burden and storage costs, and it encourages clearer decisions about why data is needed.