Which statement is NOT aligned with data minimization?

Which statement is NOT aligned with data minimization?

• A. Collecting only data necessary for a given purpose
• B. Retaining data only as long as needed to fulfill the purpose
• C. Limiting data collection to what's required
• D. Encrypting data at rest

Answer: (D)

Data minimization centers on reducing the amount of data you collect and keep, and only for as long as it’s needed for the defined purpose. Encrypting data at rest fits into data protection and security, not into reducing the volume or duration of data. It protects data regardless of how much you collected or how long you stored it, but it doesn’t minimize the data itself. So, that statement isn’t aligned with data minimization. The other options directly reflect collecting only what’s necessary, limiting collection to what’s required, and retaining data only as long as needed, which are the core practices of minimization. For example, if you only need an email to contact someone, you shouldn’t gather or keep extra details; encryption can still be used, but it doesn’t substitute for minimizing the data itself.

Data minimization centers on reducing the amount of data you collect and keep, and only for as long as it’s needed for the defined purpose. Encrypting data at rest fits into data protection and security, not into reducing the volume or duration of data. It protects data regardless of how much you collected or how long you stored it, but it doesn’t minimize the data itself. So, that statement isn’t aligned with data minimization. The other options directly reflect collecting only what’s necessary, limiting collection to what’s required, and retaining data only as long as needed, which are the core practices of minimization. For example, if you only need an email to contact someone, you shouldn’t gather or keep extra details; encryption can still be used, but it doesn’t substitute for minimizing the data itself.