Which practice best supports data minimization during document processing?

Which practice best supports data minimization during document processing?

• A. Collect everything regardless of necessity.
• B. Share data with third parties without consent.
• C. Store data indefinitely without review.
• D. Collect only data that is strictly necessary and limit exposure.

Answer: (D)

Data minimization means gathering only what you truly need and limiting how much data you expose. In document processing, this means pinpointing exactly which data elements are necessary for the task, collecting only those items, and restricting who can access or view them. The best practice is to collect only data that is strictly necessary and limit exposure because it reduces privacy risk, lowers storage and processing burdens, and supports compliance with laws and policies that require limiting data collection and access. It also makes security and audit easier by having fewer data points to protect. Other approaches don’t align with minimization: collecting everything regardless of necessity creates unnecessary risk and cost; sharing data with third parties without consent breaches privacy and legal obligations; and storing data indefinitely without review increases exposure and runs counter to responsible data stewardship.

Data minimization means gathering only what you truly need and limiting how much data you expose. In document processing, this means pinpointing exactly which data elements are necessary for the task, collecting only those items, and restricting who can access or view them. The best practice is to collect only data that is strictly necessary and limit exposure because it reduces privacy risk, lowers storage and processing burdens, and supports compliance with laws and policies that require limiting data collection and access. It also makes security and audit easier by having fewer data points to protect.

Other approaches don’t align with minimization: collecting everything regardless of necessity creates unnecessary risk and cost; sharing data with third parties without consent breaches privacy and legal obligations; and storing data indefinitely without review increases exposure and runs counter to responsible data stewardship.