Question

A privacy engineer is reviewing an online registration form for a new loyalty program. The business purpose is limited to sending members promotional offers and tracking reward points. The current form collects name, email, home address, date of birth, mobile number, national ID number, and household income. The marketing team insists all fields are 'useful for future analytics we might do.' Which action BEST aligns the form with the collection limitation principle?

Accepted Answer

Remove fields not necessary for the stated loyalty purpose, collecting only name, email, and the minimum needed to administer rewards

Answer

Retain all fields but encrypt the national ID and income data at rest to reduce exposure risk

Answer

Keep all fields but add a broad consent checkbox permitting use for any future analytics purposes

Answer

Mark national ID and income as optional while retaining all fields on the form