Data minimization
Account and order services should collect only information needed to deliver the requested service.
This page will describe data collected, purposes, retention and customer rights. The final notice requires review against live services and applicable law.
Account and order services should collect only information needed to deliver the requested service.
Sensitive customer information must be protected with access controls, secure sessions and minimal logging.
The final notice and consent flow must be reviewed before registration, analytics or checkout is activated.