Do not collect the data that you do not need.

[krutonium@social.treehouse.systems]

@Em0nM4stodon Any Data you DO collect should be treated like Toxic Waste.

[muddle@infosec.exchange]

@Em0nM4stodon https://en.wikipedia.org/wiki/Algorithms_%2B_Data_Structures_%3D_Programs

[megalomaniac@mastodon.me.uk]

@Em0nM4stodon “ahhh but we need all the data.”
No you don’t.
“But we might need…”
No you won’t.
“But it’s legitimate interest.”
Is it, is it REALLY?

[mindiell@mamot.fr]

@Em0nM4stodon Do not collect the data

[bradr@infosec.exchange]

@Em0nM4stodon

12 step programs for data addicts

[xs4me2@mastodon.social]

@Em0nM4stodon

Rather in regulations.

Data that is not needed shall not be collected.

[stiiin@infosec.space]

@Epic_Null @Em0nM4stodon The missile knows where it is at all times.

[bastelwombat@chaos.social]

@Em0nM4stodon It makes #GDPR compliance soooo much easier.

[cppguy@infosec.space]

@Epic_Null @Em0nM4stodon

Step 4: ensure that the data is accurate and, where necessary, up to date:

Principle (d): Accuracy

(ico.org.uk)

Step 5: don't process the data in ways that are incompatible with your original reason for collecting it:

Principle (b): Purpose limitation

(ico.org.uk)

[mroach@ublog.mroach.com]

@alsvha @Em0nM4stodon They all have so much Legitimate Interest!

[chrishenrichs@norden.social]

@Em0nM4stodon Do not collect the data that you do not need.

[qgustavor@urusai.social]

@Em0nM4stodon While I understand the correct context, this sounds like advise to data hoarders.

[seharinsights@mastodon.social]

@Em0nM4stodon yes

[pikesley@mastodon.me.uk]

@Em0nM4stodon

I have collected
the data
that I did
not need

and which
you were probably
saving
for breakfast

[oranger@piaille.fr]

@Em0nM4stodon : disagree
@Mindiell +1
Do Not Collect Data You Don't Own Already.

[renardboy@mastodon.social]

@Em0nM4stodon average tech exec reading this:

"collect everything and invest massively in tech that allows us to collect even more"?

[pascaline@mastodon.nl]

@Em0nM4stodon

Where I work, customers are asked for their name, address, and email address to send the books and invoices. For phone number in case something is urgent. That's it. It's stored in a modest, local database that only contains that, and that isn't connected to other databases, applications, or even the outside world. It has always been like this. There is zero, absolutely zero interest in checking people and storing information. There are better and more positive things to do

[em0nm4stodon@infosec.exchange]

@torgo

[jackryder@infosec.exchange]

@Em0nM4stodon 'member when that was the standard instead of some kind of "insight".

_{I member...}

[uair@autistics.life]

@Em0nM4stodon

The only secure data is that which was never collected in the first place.

I've been terminally online since the 90s and if you google my real name, you'll get nothing. I'm a ghost, and this is wise advice.