Data Minimization

Data minimization limits the information handled to what the approved purpose needs. It asks whether a field is necessary, how much detail is required, and which copies and users need it.

Reduce detail without breaking the task

A delivery route needs an address, but a regional volume chart may need only regional counts. Removing the address from the chart does not require removing it from the active delivery task. Minimize according to each use.

Free text and logs need attention too. Deleting an email column leaves the same email intact if it appears inside a support message.

Check usefulness and exposure together

A smaller dataset is not automatically sufficient or anonymous. Test that the remaining fields support the task and assess whether combinations still identify people. Limit retention and access as complementary controls. Invented test cases can avoid unnecessary production copies, but their coverage still needs checking.

Reference: NIST Privacy Framework.