Data Minimization

Chapter 2 discussed the importance of the constant pursuit of anonymity for privacy professionals. A corollary to that principle is the minimization principle. This principle refers to the minimization of identity and data collection. Companies should seek to collect the minimum amount of information that is needed to provide their services to their customers. Solution developers should collect the minimal amount of information with their products and services. If the user's identity is not needed, don't collect it. Use a pseudonym or an account ID instead.

Collecting too much data can cost a business in many ways. The extra resources, software, and personnel needed to manage excess data are only a portion of the problem. There ...

Get Privacy What Developers and IT Professionals Should Know now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.