GDPR Article 5(1)(c) principle requiring that personal data collected be adequate, relevant and limited to what is necessary for the purposes of processing. Sits alongside Accountability as one of the core Article 5 principles a Controller must be able to demonstrate.

Data minimisation is frequently the first control an AI system’s Bias mitigation obligations under Article 10 of the AI Act run into, since richer training data can conflict with minimisation.