Data minimization
CIPP/US glossary · Last reviewed: · By Victor Humenhuk (CIPP/US certified)
Data minimization - The principle that data should be kept only as long as necessary to fulfill its purpose; secure destruction also reduces breach exposure.
In the CIPP/US body of knowledge, Data minimization comes up under Chapter 14: The GDPR and International Privacy Issues; Chapter 7: State Data Breach Notification, Data Security, and Data Destruction Laws.
Data minimization in context
- About ==two-thirds== of states have ==data destruction (disposal) laws== requiring personal information to be disposed of so it is ==no longer readable or decipherable==, advancing ==data minimization==. (State Data Destruction Laws)
- All processing must abide by the GDPR's ==seven principles==: lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and ==accountability==, under which the controller must demonstrate compliance with the other six. (The Seven General Principles)
Where Data minimization is covered in the CIPP/US study notes
Related terms
- Data destruction law
- FTC Disposal Rule
- Purpose limitation
- Storage limitation
- Accountability
Test yourself on Data minimization
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/US practice questions, or read the full CIPP/US study guide - every study note is free.