Which privacy control stands for Data Minimization and Retention?

• A. Data Minimization and Retention
• B. Individual Participation and Redress
• C. Transparency
• D. Privacy Incident Response

Answer: (A)

Data minimization and retention is the privacy control that embodies collecting only what is necessary and keeping data only as long as required. This directly captures the idea of limiting what is gathered and defining how long it is stored, which reduces exposure and helps meet retention policies and regulatory needs. The other controls address different privacy areas—rights of individuals to participate and seek redress, making processing transparent to users, and having a plan for handling privacy incidents—none of which specifically focus on limiting data collection and defining retention periods like this one does.