Privacy GovernanceCalifornia Data Minimization Requirement: What CPRA Requires in Practice
Your analytics team wants to add household income range to the signup form to improve ad targeting. Your product team is capturing full browsing histories for all logged-in users in case the data becomes useful for a recommendation feature later. Your marketing team is enriching CRM records with third-party behavioral profiles because the data was available. None of these are theoretical risks — all three are exactly the kind of practice that California's data minimization requirement, codified in CCPA Section 1798.100(c), is designed to prohibit.
Apr 29, 2026
14 min read
Read
