ISC2 CISSP Practice Question
During a Privacy Impact Assessment (PIA) for a new Customer Relationship Management system, which of the following represents the MOST important principle that should guide an organization's data collection practices?
Data minimization - collecting relevant data for specified purposes
Data standardization - ensuring collected data adheres to common formats
Data protection - collecting useful data while ensuring strong security controls
Data maximization - collecting data to support business analytics