Article 5(1)(c) of the GDPR defines data minimization by saying that the processing of personal data should be “adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.” It means that businesses should only collect essential information they need and keep it as long as it’s actually needed. Read the GDPR compliance checklist to learn more about how to comply with the law.