An IS auditor is reviewing the design of a new customer loyalty mobile application. The requirements specify that the app will collect the customer's full date of birth, home address, and precise GPS location continuously, even though the loyalty program only needs to verify that a customer is over 18 and identify the nearest store to offer promotions. Which privacy principle is MOST directly violated by this design?