Data minimisation
Art. 5(1)(c)
-
Last updated
Mandatory
Catalog reference
Collect and retain only the personal data that is adequate, relevant, and necessary for the purpose at hand. Don't gather 'nice to have' data on the chance it becomes useful later.
Narrative — how we satisfy this requirement
Service desk tickets ask for the minimum details needed, and screenshots and logs are redacted before they are shared inside the company.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due