California Privacy Agency Warns Against Collecting Excess Data

California’s first-in-the-nation privacy regulator issued on Tuesday its first enforcement advisory on data minimization, or the practice of collecting only data that’s needed for a business transaction and nothing more.

The California Privacy Protection Agency (CPPA) gained powers to enforce the California Consumer Privacy Act last July. The agency has since been building out its enforcement division and has announced only one public probe around connected cars.

The advisory is one signal that the agency is gearing up for more regulatory action this year, a move that privacy analysts have anticipated.

“I don’t think there’s a realization of the risk ...