Personal data
Data Minimization Under GDPR: Rules, Examples and Fines
Data minimization means collecting only what a purpose requires. Article 5(1)(c) explained: the three tests, field-by-field examples, CJEU rulings, fines.
July 30, 202612 min read
17 articles
Data minimization means collecting only what a purpose requires. Article 5(1)(c) explained: the three tests, field-by-field examples, CJEU rulings, fines.
GDPR compliance guide 2026: the 10 obligations in order — lawful basis, ROPA, notices, rights, DPIA, processors, transfers, security, breach, retention.
GDPR vs AML conflicts: 5-10 year retention, KYC data minimization, AMLA 2026 launch, sanctions screening. Resolutions per Art. 6(1)(c) + Art. 23.
The CNIL has just imposed a €500,000 fine on a company for conducting commercial prospecting without complying with the GDPR
Here is the list of GDPR information notices that you must mandatorily provide before collecting personal data
How to design a questionnaire that is compliant with the GDPR and ensures data collection in accordance with the law
Only the DPO is regulated by the GDPR. See how the Data Protection Officer differs from a compliance officer, when it is mandatory, and who appoints one.
The GDPR gives the Data Protection Officer specific tasks: informing and advising, monitoring compliance, staff training and advising on DPIAs under Article 39.
The GDPR accuracy principle under Article 5(1)(d): what it requires, how to implement it in practice, and how opinions and historical records are treated.