Rpriacy -

Instead of collecting everything “just in case,” systems must be designed to collect only what is strictly necessary. This requires shifting from opt-out to opt-in by default, with heavy penalties for over-collection.