If some of the detail collected is only needed for a small set of individuals, then it is inappropriate to gather it from all data subjects, says Exam-Labs. A data controller should consider the minimum data needed to meet the purpose of the organisation. This also allows individuals to decide whether they are happy to […]