Data minimisation
Collecting and keeping only the personal data that is actually needed.
Data minimisation is a core principle of both the GDPR and the Swiss Data Protection Act: collect only what you need for a clear purpose, and keep it no longer than necessary. In identity verification, where documents and faces are involved, it matters more than almost anywhere else.
In practice
- Ask only for the checks a use case really needs. An age check doesn't need a full identity.
- Keep the result of a verification rather than copies of every image, where the law allows it.
- Set retention periods and delete automatically when they run out.
- Limit who in the company can see verification data.
Why it is good business
Data you don't hold can't leak. Smaller data sets also make access requests, audits and breach assessments simpler.
Contact
Talk to us
Tell us what you’re trying to verify. We’ll show you how secuveri can fit your workflow.
