Collect only fields necessary for itinerary assistance: Which approach satisfies data minimization?
Data minimization means collecting only information necessary for the defined itinerary-support purpose.
The question
Under the GDPR, a travel-support chatbot team wants to collect passport numbers, dietary preferences, booking references, and trip dates. The service only needs booking references and trip dates to answer routine itinerary questions. Which approach satisfies data minimization?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Collect every field to support future personalization features.Potential future uses do not justify collecting information unnecessary for the currently stated itinerary-support purpose.
- Collect passport numbers temporarily, then delete them after responses.Temporary retention does not make unnecessary collection proportionate or compliant with the stated routine-support purpose.
- Collect all fields, then restrict access to support agents.Access controls reduce exposure, but they do not satisfy minimization when unnecessary fields are collected initially.
- Collect only fields necessary for itinerary assistance. ✓Limiting collection to booking references and trip dates matches the stated service purpose and avoids unnecessary personal or special-category data.
The trap
First ask what the stated purpose actually needs; access limits and short retention do not cure excessive collection. How to remember it
Data minimization means collecting only information necessary for the defined itinerary-support purpose.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Assess whether another documented lawful basis fits: Which approach best resolves the lawful-basis →
- Use pseudonymization with separately protected: Which approach best satisfies both constraints? →
- Controller processing for the supplier’s independent reuse: How should the supplier’s reuse be characterized? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.