Privacy & Tech

How can websites minimise the personal data they collect?

A website minimises personal data by collecting information that is sufficient for a defined purpose while excluding information that the purpose does not require. Start with the task the visitor is completing. A newsletter subscription may need an email address without needing a home address or date of birth.

Website area	Example of minimisation
Forms	Remove fields without a clear operational need.
Analytics	Collect relevant events instead of every available interaction.
URLs and logs	Avoid including unnecessary personal details.
Integrations	Disable data fields and sharing options that are not needed.

The ICO’s data minimisation guidance explains that information must be adequate, relevant and limited to what is necessary.

Minimisation can also involve reducing the precision of collected information when a less detailed value is sufficient for the purpose. For example, a website might use an approximate location instead of precise coordinates.

Minimisation is an ongoing decision. Review collection when a feature changes or its original purpose ends. Analytics data retention addresses the related question of how long information should remain available after collection.