Which of the following should be used to address data kept beyond its intended lifespan?

Reference: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-dataprotection-regulation-gdpr/principles/data-minimisation/

Data minimization is a privacy principle that requires limiting the collection, storage and processing

of personal data to what is necessary and relevant for the intended purposes. Data minimization

should be used to address data kept beyond its intended lifespan, as it helps to reduce the amount of

data that is stored or retained, and to delete or dispose of data that is no longer needed or justified.

Data minimization also reduces the privacy risks and costs associated with data storage and

retention, such as data breaches, unauthorized access, misuse or loss of data. The other options are

not effective ways to address data kept beyond its intended lifespan. Data anonymization is a

technique that removes or modifies all identifiers in a data set to prevent or limit the identification of

the data subjects, but it does not address the issue of data retention or deletion. Data security is a

process of applying technical, administrative and physical measures to protect the confidentiality,

integrity and availability of data, but it does not address the issue of data retention or deletion. Data

normalization is a technique that organizes the data in a database to reduce redundancy and improve

consistency, but it does not address the issue of data retention or deletion1, p. 75-76 Reference: 1:

CDPSE Review Manual (Digital Version)