What is data minimization and why is it important?

• A. Reducing data storage by deleting logs immediately.
• B. Collecting all possible data to ensure redundancy.
• C. Minimizing the number of staff required to process data.
• D. Collecting only what is necessary to accomplish the mission to reduce exposure and risk.

Answer: (D)

Data minimization means collecting only what is necessary to accomplish a specific, legitimate purpose and nothing more. This approach reduces how much data is stored, processed, and exposed, which lowers the risk of data breaches, misuse, or accidental sharing. It also supports privacy by design, simplifies data governance, and helps meet regulations that require limiting data to what’s needed.

The best choice reflects that idea: collecting only what is necessary to accomplish the mission to reduce exposure and risk. Collecting all possible data would increase risk and violate minimization. Focusing on deleting logs immediately targets retention policies rather than the fundamental practice of limiting data collection. And tying data minimization to staffing levels misses the core concept, which is about what data is collected, not how many people handle it.