← Security+ glossary

Data minimization

Data minimization is the principle of collecting and keeping only the data that is necessary for a specific purpose, and no longer than needed. It is good practice because it reduces the attack surface, the risk of a data breach and compliance costs, since what is not collected cannot be stolen.

All Security+ guides →