Ensuring only the data necessary for a specific purpose is collected and processed (Article 5(1)(c)).