Adequate, relevant and limited to what is necessary

To ensure that the personal data held is adequate, relevant and limited to what is necessary

Schools/ETBs must:

identify the minimum amount of personal data needed to fulfil the purpose
hold that level of information but no more (ensure that the information is not excessive)
ask is the personal information you collect really necessary?
do you have a valid reason for asking for sensitive data? If an individual asked the school/ETB to justify every piece of data they hold about them, could the school/ETB do so? (Unless you have a very good reason for seeking sensitive data, don't ask for it).

Schools/ETBs can fulfil this requirement by making sure they seek and retain only the minimum amount of personal data needed to achieve their purpose(s). Schools/ETBs should decide on specific criteria by which to assess what is adequate, relevant and limited to what is necessary and apply those criteria to each information item and the purpose(s) for which it is held.

To comply with this principle, schools/ETBs should ensure that the information sought and held is:

adequate in relation to the purpose(s) for which you sought it
relevant in relation to the purpose(s) for which you sought it
limited to what is necessary in relation to the purposes for which you sought it.