Principle 3: Use the minimum necessary confidential information
Where use of confidential information is considered to be necessary, each item of information must be justified. This is to ensure that only the minimum amount of confidential information is included as necessary for a given function.