Data minimisation
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Data minimisation - Personal data must be adequate, relevant and limited to what is necessary for the purpose; supports preferring traffic data over content.
In the CIPP/E body of knowledge, Data minimisation comes up under Ch 14.6.5-14.6.6 - Legitimacy & proportionality; Ch 17.8 - Mobile apps; Ch 6.4 - Data minimisation.
Data minimisation in context
- [[Data minimisation]] means collecting and processing only data that is ==relevant, necessary and adequate== for the purpose - collect only what you really need. (Data minimisation)
- This topic also drills the most-tested skill: ==telling the principles apart== - purpose limitation (why), data minimisation (how much), storage limitation (how long), accuracy (correctness), and integrity and confidentiality (security). (Accountability and telling the principles apart)
- Proportionality links to [[data minimisation]] - prefer ==traffic data== (who/when) over ==content==. (Legitimacy and proportionality of monitoring)
Where Data minimisation is covered in the CIPP/E study notes
- Data minimisation
- Legitimacy and proportionality of monitoring
- Applications on mobile devices
- Module 4 · Data processing principles (OECD + Article 5)
Related terms
- Necessity
- Proportionality
- Anonymised data
- Legitimate-interests balancing test
- Traffic data
- Collective agreement
- App
- Edge computing
- Granular consent
- Article 5
Test yourself on Data minimisation
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.