A debt collection agency is attempting to locate a debtor and collects information on several people with similar names. During the inquiry, some of these people are discounted. How should the agency

Question

Options

• AThe agency should keep only the minimum data needed to form a basic record of people
• BThe agency should delete all personal data collected after the debtor is found.
• CThe agency should keep the data collected but store in an anonymized format.
• DThe agency should keep the data collected and mark an indication on the people removed from

• A
  3% (1)
• B
  11% (4)
• C
  82% (31)
• D
  5% (2)

Explanation

The data minimization principle requires that personal data be adequate, relevant, and limited to what is necessary. For individuals who were discounted (confirmed not to be the debtor), their identifiable personal data is no longer needed in its original form. Anonymizing this data satisfies the minimization principle-it retains the operational record needed for audit or process documentation while eliminating the personal data linkage. Keeping fully identifiable data (option D) exceeds what is necessary, and deleting all data immediately (option B) may not be operationally or legally required until the inquiry concludes.

No community discussion yet for this question.