Which data handling practice best aligns with data minimization when collecting marketing information?

• A. Collect all personal data you can acquire for future use
• B. Collect only data necessary for the stated purpose and with consent
• C. Share data with third parties without consent
• D. Retain data indefinitely regardless of necessity

Answer: (B)

Data minimization means collecting only the minimum amount of personal information needed to achieve a stated, legitimate purpose. In marketing, this means gathering just the data necessary to deliver the campaign or tailored messaging and obtaining clear consent for that use. This approach reduces privacy risks, limits storage and security burdens, and keeps your data practices transparent and compliant with expectations and laws.

Why this is best: collecting only what’s necessary and with consent directly aligns data handling with the purpose of the collection, ensuring you aren’t capturing or keeping extra details that aren’t needed. It also supports user trust and makes it easier to justify and manage data retention.

Why the other approaches don’t fit: collecting all possible data increases exposure and risk and isn’t aligned with the purpose-only mindset. Sharing data with third parties without consent breaches privacy expectations and laws. Retaining data indefinitely regardless of need ignores how long data is truly useful or permissible to keep and elevates risk without clear benefit.