Collecting only the data strictly necessary for a specific purpose.

Collecting only the data strictly necessary for a specific purpose.

• A. Contextual Integrity
• B. Right to be Forgotten
• C. Control over Data
• D. Data Minimization

Answer: (D)

Data minimization is the practice of collecting only what is strictly necessary to fulfill a stated purpose. This principle guides designing data collection to request the minimum amount of information needed and to avoid gathering extra details that aren’t essential. It reduces privacy risk, lowers storage and processing costs, and strengthens security by limiting the data that could be exposed in a breach. For example, a service might verify identity with just a name and a date of birth, rather than collecting unrelated demographics. The other concepts relate to different aspects of privacy: contextual integrity concerns whether data flows align with social norms, the right to be forgotten focuses on deleting data, and control over data centers on user rights to manage or access data rather than the act of collecting it.

Data minimization is the practice of collecting only what is strictly necessary to fulfill a stated purpose. This principle guides designing data collection to request the minimum amount of information needed and to avoid gathering extra details that aren’t essential. It reduces privacy risk, lowers storage and processing costs, and strengthens security by limiting the data that could be exposed in a breach. For example, a service might verify identity with just a name and a date of birth, rather than collecting unrelated demographics. The other concepts relate to different aspects of privacy: contextual integrity concerns whether data flows align with social norms, the right to be forgotten focuses on deleting data, and control over data centers on user rights to manage or access data rather than the act of collecting it.