← Compliance glossary

Data minimisation

FRT & privacy

The privacy-by-design principle of collecting only the personal information that is reasonably necessary for the function or activity at hand. Baked into APP 3 of the Privacy Act 1988 (Cth) as the "reasonable necessity" test for collection. For FRT in clubs, data minimisation prefers template-only storage over raw imagery, narrow retention windows, and limited downstream sharing — each of which reduces APP 11 exposure and NDB-scheme blast radius if a breach occurs.

This term sits in the FRT & privacy section of the working glossary — vocabulary covering facial-recognition controls and the Privacy Act 1988 (Cth), including the Australian Privacy Principles and the Notifiable Data Breaches scheme.

Read more

Operational pillar pages

Related terms

Other terms in FRT & privacy