THE SHORT ANSWER
Collect personal information only for a defined business purpose, at an appropriate level of detail, with suitable transparency and choice. Restrict access, set retention and deletion rules, and take extra care with sensitive information. Requirements vary by jurisdiction and context.
Use a purpose-and-minimization test
- What specific outcome needs this field?
- Could less precise information work?
- Would the person reasonably expect this use?
- Who needs access?
- How long is it needed?
- How will correction or deletion be handled?
Privacy continues after collection
| Stage | Decision |
|---|---|
| Collect | Purpose, necessity and appropriate choice |
| Use | Compatible purpose and authorized access |
| Share | Recipient, scope and safeguards |
| Retain | Defined need and review |
| Delete | Secure, consistent disposal and backup handling |
Treat principles as operational guidance, not legal advice
Consent is important in some contexts but is not a universal answer to every use. Obtain qualified advice about applicable laws, contracts and sensitive categories.
Turn guidance into an owned business action
Choose one relevant account, system, data set or workflow. Record the owner, current control, most important failure, detection signal, response step and recovery dependency. Escalate specialist, legal or regulatory questions to qualified advisers for the applicable context.
Sources & further reading
- Direct marketing guidance
UK Information Commissioner's Office. UK regulatory guidance on planning, collecting information, transparency and respecting communication preferences, checked 28 September 2026. Requirements vary by jurisdiction and context; this is not individual legal advice.
- Customer Relationship Management
OpenStax, Rice University. Open educational material on managing customer relationships and value over time. CRM software and lifecycle messaging do not themselves create retention.
Examples and exercises are illustrative unless attributed to a source. No independent expert review is claimed.
A correction, a counterexample or an experience worth sharing?
Join the conversation ↗