GDPR Principle C Quiz

What is the main requirement under Principle C (Data Minimization) of the GDPR?

• Collect as much personal data as possible for future use

• Only collect data that is adequate, relevant, and necessary for the purpose

• Share personal data with other organizations to minimize storage needs

• Collect data only from individuals in the EU

Which of the following would violate the data minimization principle?

• Collecting only essential information required to fulfill a contract

• Gathering additional data “just in case” it might be useful later

• Limiting data collection to only what is needed for a specific purpose

• Reviewing data collection methods regularly to reduce unnecessary data

According to Principle C, personal data should be:

• As detailed as possible

• Collected from every available source

• Limited to what is necessary for the specified purpose

• Shared with as many parties as possible

Which action would comply with the data minimization principle?

• Collecting extensive data on users’ family members for a basic subscription service

• Asking only for contact details when registering for a newsletter

• Storing extra personal data for potential marketing purposes

• Using broad questionnaires that cover unrelated personal topics

Under Principle C, what does "adequate" mean in terms of data collection?

• Collecting only enough data to identify a person uniquely

• Gathering enough data to reasonably meet the intended purpose

Which of the following best describes the principle of data minimization?

• Gathering enough data to reasonably meet the intended purpose

• Collecting data across multiple sources for accuracy

• Collecting more data than needed to ensure completeness

Why is data minimization important in protecting individuals' privacy?

• It prevents organizations from overloading their systems with unnecessary data

• It reduces the risk of exposing more data than is needed if a breach occurs

• It allows companies to collect data freely without limitations

• It encourages sharing data with other companies for efficiency

Which of the following is an example of violating the data minimization principle?

• An online retailer collecting only billing and shipping details for an order

• A mobile app requiring location data access for a weather forecast feature

• An employer collecting detailed medical histories from job applicants

• A survey asking age group instead of exact age for demographic analysis

What is the recommended approach under Principle C when an organization is unsure if certain data is needed?

• Collect the data just in case it might be useful

• Avoid collecting the data until it is proven necessary

• Collect the data and store it temporarily until a decision is made

• Share the data with a third-party processor to reduce liability

Which of these examples would be compliant with Principle C’s data minimization requirement?

• Collecting information on hobbies when signing up for a bank account

• Gathering only essential job-related qualifications during hiring

• Requesting detailed family information for a basic web service sign-up