Data minimisation is the principle that only as much personal data may be processed as is necessary for the purpose in question.
Content of the principle
Personal data must be adequate, relevant and limited to what is necessary in relation to the purpose. This applies to the amount of data, the extent of the processing, the retention period and the group of people with access.
The German term Datensparsamkeit (data economy) comes from the former BDSG and is today used largely as a synonym.
Practical examples
Forms only ask for mandatory information that is actually needed. Log data is truncated or deleted after a short time. Wherever possible, pseudonymised or anonymised data is used.
Legal provisions
- Art. 5(1)(c) GDPR
- Principle of data minimisation.
- Art. 25 GDPR
- Implementation through data protection by design and by default.
Related terms.
Purpose limitation Purpose limitation is the principle that personal data may only be collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes. Art. 5(1)(b) GDPR 
Privacy by default Privacy by default means choosing default settings so that, by default, only the personal data necessary for the specific purpose is processed. Art. 25(2) GDPR Retention period / storage limitation The principle of storage limitation requires personal data to be kept in a form which permits identification for no longer than is necessary for the purpose of the processing. Art. 5(1)(e) GDPR
All terms from A to Z Privacy by default Privacy by default means choosing default settings so that, by default, only the personal data necessary for the specific purpose is processed. Art. 25(2) GDPR Retention period / storage limitation The principle of storage limitation requires personal data to be kept in a form which permits identification for no longer than is necessary for the purpose of the processing. Art. 5(1)(e) GDPR 