Which practice illustrates data minimization in privacy by design?

• A. Collect as much data as possible for future use.
• B. Collect only data that is necessary for the task and purpose, with default privacy settings.
• C. Store data indefinitely by default.
• D. Share data with third parties by default.

Answer: (B)

Data minimization means designing systems to collect only what is truly necessary for the stated task and applying privacy protections by default. When you gather only the essential data and set defaults to limit data processing, you reduce exposure, lower risk, and make compliance simpler. That exactly captures the described practice: collect only what’s needed for the task and keep privacy settings restrictive by default. Collecting as much data as possible goes against minimization; storing data indefinitely exceeds what’s needed and adds risk; sharing data by default expands exposure and weakens privacy protections.