Which statement reflects a data privacy principle?

• A. Limit data collection to what is necessary.
• B. Share data without consent.
• C. Store data in unsecured locations.
• D. Keep data indefinitely without need.

Answer: (A)

The main concept is data minimization—the idea that you should collect only what you actually need for a defined purpose and no more. This principle keeps personal data out of circulation unless it’s truly necessary, reducing the risk if a breach happens and helping meet legal and ethical privacy expectations. The statement that reflects this idea is best because it enshrines the idea of limiting collection to what serves a specific task, which directly supports safeguarding user privacy and maintaining trust.

In contrast, sharing data without consent bypasses user rights and violates privacy laws; storing data in unsecured locations creates avoidable security risks; and keeping data indefinitely without a real need ignores retention limits and increases exposure without justification.