Data Minimization

The principle of collecting and processing only the minimum amount of personal data necessary for a specific purpose, reducing privacy risks in AI systems.

Only collecting the data you actually need. If your AI just needs to know someone's age bracket, don't collect their exact birthdate. Less data collected = less risk if there's a breach.

Data minimisation is a legal requirement under GDPR and the Australian Privacy Act. Your AI governance framework must ensure that AI projects collect and retain only the data necessary for their stated purpose.