When exporting DPAS data externally, what principle should guide the data included?

• A. Data minimization: export only what is necessary.
• B. Data minimization: export only what is necessary.
• C. Export data in a proprietary format with no encryption.
• D. Retain all data forever without deletion.

Answer: (B)

Data minimization means export only what is necessary to accomplish the task. When exporting DPAS data externally, limit the data elements to what is actually needed for the recipient to perform their function, reducing the chance of exposing sensitive information and helping meet privacy and security requirements. For example, share only essential transaction details and item identifiers, not full personnel records or lengthy histories. Also ensure data is protected in transit and at rest with encryption and approved secure channels. Choices that advocate exporting data without encryption or keeping everything forever do not align with this practice, as they unnecessarily raise risk and conflict with retention policies.