Phil's employer aims to minimize the risks associated with customer data. To ensure that they only possess the data that is necessary for their business purposes, what measure should they implement?

Data minimization refers to the practice of collecting and retaining only the data that is necessary for business operations. Phil should verify that his organization is implementing data minimization protocols. While data masking obfuscates data, it does not reduce the amount collected. Tokenization entails replacing sensitive data with a unique identifier that can be accessed via a lookup table. Anonymization removes the ability to identify individuals from the data, but this can be a challenging task.