# What is data minimization?

> For the complete site index, see [llms.txt](/llms.txt). Every page is also available as Markdown: replace the trailing slash with `.md` (`/pricing/` becomes `/pricing.md`), or send `Accept: text/markdown` to the page URL itself.

---

**Category:** GDPR
**URL:** https://www.cookieyes.com/knowledge-base/gdpr/what-is-data-minimization/

---

Data minimization is a principle outlined in the General Data Protection Regulation (GDPR) that refers to the practice of limiting the collection, storage, and use of personal data to only what is necessary for a specific purpose and for a stipulated time. 
[Article 5 of GDPR](https://gdpr-info.eu/art-5-gdpr/) states that:
*“Personal data [collection] shall be… adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimisation).”*
Organizations can reduce privacy risks such as data breaches and protect individuals’ privacy rights by implementing data minimisation. To comply with this principle, businesses must determine what data they collect is necessary, obtain consent when collecting data, and regularly review and delete data that is no longer needed.  
You can refer to the UK Information Commissioner’s Office (ICO) [examples](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/a-guide-to-the-data-protection-principles/data-minimisation/) to determine whether your business is processing excessive personal data.