A summer festival wristband app demands each attendee's full Social Security number solely to pick up a colored band at the gate. What principle should the privacy and asset-security review apply?
Select an answer to reveal the explanation.
Short Explanation
Asking for someone's SSN to hand them a neon wristband is like demanding a passport to borrow a library pencil. Collect only what the job needs—maybe a name and order code—not the keys to their financial life. Minimization shrinks breach blast radius before you ever encrypt a byte.
Full Explanation
Collection limitation and data minimization require gathering only personal data necessary for a defined, legitimate purpose. Full SSNs are high-value identifiers rarely justified for simple fulfillment tasks such as wristband pickup. Excessive collection increases regulatory exposure and the impact of any later compromise of the asset.