Personal information handling shall be based on explicit and reasonable purposes and directly related to those purposes, and shall exert the minimum impacts on the rights and interests of individuals.
The collection of personal information shall be limited to the minimum scope required by the purpose of handling, and personal information may not be collected excessively.
Related provisions: