Data Minimization (1798.100(c))

The data minimization duty in sections 1798.100(c) of the CCPA and CPRA obligates businesses to collect, retain and use personal information only to the extent necessary for the disclosed purpose and to delete it when it is no longer needed, preventing excessive or irrelevant data gathering and limiting retention periods.