What does the data minimization principle require?

• A. Collect only data needed for the purpose, to protect privacy and reduce risk
• B. Collect additional data to increase power but raise privacy risks
• C. Archive data after study completion
• D. Disclose data publicly to increase transparency

Answer: (A)

Data minimization means collecting only the data that are strictly necessary to accomplish the stated purpose. By limiting collection to what is needed, you protect individuals’ privacy and reduce the risk of data misuse or breaches. In practice, you define the objective, determine the minimum data elements required, and avoid gathering extra details or identifiers that aren’t essential. Collecting more data to boost statistical power increases privacy risks without adding necessary value. Archiving after study completion is about data lifecycle and stewardship, not the act of limiting what you collect. Publicly disclosing data would expose sensitive information and contradict the idea of minimizing what you gather.