Data minimization

Personal data must be adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed. Where possible, in order to reduce risks for data subjects, the Organization must apply anonymization or pseudonymization to personal data.