Collect less, leak less: data minimization

Here's a truth most security advice skips: the safest data is the data you never collected. You can't leak what you don't hold. Data minimization — keeping only what you actually need, for only as long as you need it — quietly shrinks your risk, your compliance burden, and the damage if something does go wrong.

How to minimize

• Collect only what you use. Every field on a form is a future liability. If you don't use it, don't ask for it.
• Delete what you no longer need. Old customer records, finished projects, ex-employee data — set a schedule and clear it out.
• Don't copy data around. Every export, spreadsheet, and backup is another place it can leak from.
• Mask or redact sensitive fields when the full value isn't needed.

Why it pays off

Under data-protection rules like GDPR, minimization isn't just good practice — it's expected. And in a breach, holding less data means a smaller incident, fewer people to notify, and far less damage. Less data is less risk, full stop.

Not sure what you're holding or where? Mapping that is the first step of an exposure audit.