thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Data Minimization

Principle of collecting and retaining only the personal data that is adequate, relevant, and necessary for a stated purpose.

Definition

Data minimization reduces breach impact, compliance burden, and privacy risk. It is a GDPR Article 5 principle and appears in CPRA and other state laws. Techniques include limiting fields collected, aggregating, truncating, and deleting data when no longer needed.

Example

A sign-up form removes the date-of-birth field and instead asks users to confirm they are over 18.

Exam tip

When asked how to reduce privacy risk most effectively, collecting less data is often the best answer.

Related terms