Companies looking to adopt data minimization best practices should begin by asking themselves why they need the data they have collected. As appropriate, policies should be redesigned to ensure the collection and retention of only the minimum amount of information. Credit: Connect world/Adobe Stock Companies looking to adopt data minimization best practices should begin by asking themselves why they need the data they have collected. As appropriate, policies should be redesigned to ensure the collection and retention of only the minimum amount of information. Credit: Connect world/Adobe Stock

You don't have to protect what you don't have.

It's a fairly obvious idea, though it's a somewhat opposite perspective to most of the cybersecurity recommendations espoused here in the U.S. But as it becomes more and more challenging for IT teams to ensure that their organizations' data remains safe from cybercriminals, perhaps it's time for U.S. companies to give the European practice of data minimization another look.

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Agency Technology
Coverage & Policy Issues
Information Security
E&S/Specialty
Corporate Risk