← Control library
D01 · Data and confidentiality
Mapped and minimised data flows
The agent collects or sends personal, health or financial data without a defined need.
Requirement
Map each input, derived field, destination and purpose; remove fields not necessary for the declared task.
Expected evidence
- Data-flow diagram with declared locations.
- Field-level purpose and minimisation review.
Proposed verification
- Trace representative and exceptional records end to end.
- Confirm suppressed fields do not appear in prompts, logs or exports.
Limit
A map is time-bound and does not by itself establish a lawful basis.