What goes wrong with “Data minimisation” in a shop, especially around customer id thresholds?

Only collecting what the sale needs, with customers' details optional. Plan for: customer id thresholds; export requests; retention. In the catalog it is a plan and nothing is built.

Go to the related page

How to read this

The tag above says how real the answer is. Answers describe the plan in the repository and design documents. No app is released. Where an answer touches tax or law, treat it as a theme to verify with a qualified local adviser.

More in Security and privacy

• Where does “Signed files” fit in Simca, with a focus on key rotation?
• Where does “PINs and sessions” fit in Simca, in particular regarding shoulder surfing?
• Why does “Secure updates” matter for a small business, with a focus on failed update?
• See it in context with the whole topic
• Search all answers