Sign in Subscribe

Topic

Data Minimization

Data Minimization is the principle that organizations should collect, use, retain, and disclose only the personal data reasonably necessary for specified purposes. This tag covers data minimization requirements across privacy and data protection laws, including the GDPR and U.S. state privacy laws, and their application to data collection, retention, sharing, AI systems, product design, privacy by design, and organizational data governance.

In the Matter of LocateSmarter, LLC

A practical analysis of CalPrivacy’s LocateSmarter decision, addressing data broker registration, the CCPA’s data minimization principle, and why businesses cannot require consumers to provide sensitive personal information to exercise the right to opt out of sale or sharing.

Colorado Privacy Act Data Protection Assessments: Understanding the Requirements

Colorado's Privacy Act requires Data Protection Assessments before high-risk processing begins. Learn when a DPA is required, what it must include, how often it must be updated, the risks organizations should evaluate, and practical steps for building a compliant assessment framework.

What Is a Risk Assessment Under the CCPA?

The CCPA requires businesses to conduct risk assessments before engaging in certain high-risk processing activities. Learn when a risk assessment is required, what it must include, how it compares to a GDPR DPIA, and the key compliance obligations under California law.

Data Protection by Design and by Default Under the GDPR: What Article 25 Requires

Learn what data protection by design and by default means under Article 25 GDPR, including privacy-protective defaults, data minimization, risk-based safeguards, accountability, DPIAs, processor selection, and how organizations can build data protection into systems from the start.

From Privacy by Design to Data Protection by Design: Principles and Practical Implementation

Privacy by Design embeds privacy into products, services, and business practices from the start. Explore its seven foundational principles, how they shaped Data Protection by Design under the GDPR, and practical steps organizations can take to turn privacy principles into everyday practice.