Collecting only the personal data that is adequate: Which practice best reflects that principle?
Data minimization means collecting only personal data that is adequate, relevant and necessary for the purpose.
The question
A team building an AI model wants to follow the data minimization principle when assembling its training dataset. Which practice best reflects that principle?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Collecting as much personal data as possible now in case additional features are needed at some later timePlausible but wrong: collecting data speculatively for possible future use is the opposite of minimization.
- Encrypting all collected personal data at rest so that unauthorized parties cannot read the raw recordsPlausible but wrong: encryption is a security safeguard, not the minimization principle about limiting collection.
- Retaining every single collected record permanently so the model can be retrained on the full historyPlausible but wrong: indefinite retention concerns storage limitation and contradicts minimizing data held.
- Collecting only the personal data that is adequate, relevant and necessary for the model's stated purpose ✓Correct: data minimization means collecting only data that is adequate, relevant and limited to what is necessary for the purpose.
The trap
Equating encryption or broad collection with data minimization. How to remember it
Data minimization means collecting only personal data that is adequate, relevant and necessary for the purpose.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Transparency, which requires informing individuals about: Applying core data protection principles, which →
- The controller must use only processors that provide: Under data protection obligations on controllers, what →
- It is a special category of data whose processing is: Under the GDPR, how is the biometric data used for that →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.