CompTIA Data+ (DA0-002)Data Governance, Quality and ControlsEasy
A mobile app development team is designing a new user registration form. To comply with the company's privacy policy, the team decides to collect only the user's name and email address, even though the marketing department requested fields for home address, date of birth, and income level. Which privacy principle is the team applying?
- AData lineage
- BData masking
- CData minimization
- DData retention
Show answer & explanationAnswer & explanation
Correct answer: C. Data minimization
Data minimization means collecting only the personal data that is necessary to fulfill a specific, stated purpose. By excluding fields not needed for registration, the team reduces privacy risk and regulatory exposure.
Why the other options are wrong
- A. Lineage tracks data's origin and movement, unrelated to collection scope.
- B. Masking hides existing data values, it does not limit what is collected.
- D. Retention concerns how long data is kept, not how much is initially collected.
Data Minimization
A privacy principle requiring organizations to collect and retain only the personal data necessary for a specific, defined purpose.
- Core principle under GDPR Article 5
- Reduces breach impact and compliance risk
- Applies at collection, not just storage or masking
Memory trick: LAMPS-IA: Lawful, Aim (purpose), Minimal, Precise, Stored briefly, Integrity, Accountable