View source for Data minimization

{{Short description|Processing only necessary personal information}}
'''Data minimization''' is the principle of collecting, processing and storing only the necessary amount of [[personal information]] required for a specific purpose. The principle emanates from the realisation that processing unnecessary data is creating unnecessary risks for the data subject without creating any current benefit or value. The risks of processing personal data vary from [[identity theft]] to unreliable inferences resulting in incorrect, wrongful and potentially dangerous decisions.

The principle of data minimization is a global, universal principle of data protection, and can thus be found in almost every legal or regulatory text on data protection/privacy.

== The data minimization principle in regulatory texts worldwide (selection) ==

* The data minimization principle is the second of the six fundamental privacy principles set forth in the [[General Data Protection Regulation]]<ref name="eur-lex.europa.eu">{{cite web|title=EUR-Lex – 32016R0679 – EN – EUR-Lex|url=http://eur-lex.europa.eu/eli/reg/2016/679/oj/eng|website=eur-lex.europa.eu}}</ref> and the [[General Data Protection Regulation#United Kingdom implementation|UK GDPR]].<ref>{{cite web|title=Principle (c): Data Minimisation|url=https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/a-guide-to-the-data-protection-principles/the-principles/data-minimisation/|website=ico.org.uk}}</ref>
* The [[OECD]] Privacy Guidelines<ref>{{cite web|title=OECD Privacy Guidelines|url=https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0188}}</ref> refer to the data minimization principle as the ''Collection Limitation Principle'' (part two, article 7).
* The [[American Data Privacy and Protection Act]] (ADPPA), a United States proposed federal online privacy bill that was not enacted included data minimisation as a main principle.<ref name="JDSupra breakdown">{{Cite web |last1=Dumiak |first1=Matt |title=Federal Privacy Bill: Breaking Down the ADPPA |work=JD Supra |date=2022-06-24 |url=https://www.jdsupra.com/legalnews/federal-privacy-bill-breaking-down-the-9181745/ |language=en |access-date=2022-07-30 |df=mdy-all |archive-date=June 25, 2022 |archive-url=https://web.archive.org/web/20220625161839/https://www.jdsupra.com/legalnews/federal-privacy-bill-breaking-down-the-9181745/}}</ref>
* The [[APEC]] Privacy Framework includes the data minimization principle, referred to as the ''Collection Limitation'' principle, as principle III.<ref>{{cite web|title=APEC Privacy Framework (2015)|url=https://www.apec.org/Publications/2017/08/APEC-Privacy-Framework-(2015)}}</ref>

==References==
{{Reflist}}

[[Category:Internet]]
[[Category:Data security]]


{{Internet-stub}}

[[de:Datensparsamkeit]]