A retail company's marketing team wants to launch a loyalty program. During design review, the privacy officer notices the sign-up form requests date of birth, home address, government ID number, and household income — but the program's stated purpose is only to award points for purchases and send promotional offers. Which privacy principle should the privacy officer invoke to challenge the proposed data collection?