What does data minimization mean in the context of investigative records?

• A. Collect all data regardless of relevance.
• B. Store data indefinitely.
• C. Share data with all parties.
• D. Collect only information necessary for the purpose and implement retention limits.

Answer: (D)

Data minimization means collecting only what is necessary for the stated investigative purpose and applying retention limits so information isn’t kept longer than needed. In practice, this means clearly defining what data is essential to the case, gathering only those data points, and securely disposing of or anonymizing information that isn’t required. It also involves setting rules for how long records are kept to reduce privacy risks and potential liability. This approach protects privacy, reduces exposure to sensitive information, and aligns with ethical and legal standards. In contrast, collecting everything, storing data indefinitely, or sharing broadly increases risk and compliance challenges.