Ch.4 Managing Data, Information and Content Regulation
Question
What does GDPR data minimisation require?
Tap to reveal answer
Answer
Process only personal data that is adequate, relevant, and limited to what is necessary.
Do not collect passport scans for a newsletter if an email address is enough.
GDPR, Regulation (EU) 2016/679
Deep dive
Data minimisation: the 'need-to-know' rule
Process only personal data that is adequate, relevant, and limited to what is necessary; the exam trap is confusing 'necessary' with 'useful'.
Listen to this page
(beta)
