Governance, Law & Compliance
Data minimization
Collecting and using only the data actually needed for a defined purpose.
Example
A form collects only the customer information required to complete the transaction.
Why it matters
It reduces unnecessary exposure and the effort of protecting information that serves no useful purpose.
You'll hear it
“Why does this form need a birth date?”
Can you control it?
Sometimes
Sometimes. An organization can define or influence data minimization through its policies, processes, contracts, and product choices. Individual users may have fewer controls.
Common questions
- Can collecting less data make an AI less useful?
- It can, so identify what is genuinely necessary and test whether the task still works well.
- Is deleting old data enough?
- No. Also question unnecessary collection and use at the start.
- Can a sample be enough instead of the full dataset?
- Sometimes. A smaller or less detailed set may meet the task's needs with less exposure.