A new system processes personal data that is unnecessary for its business purpose. What is the best design recommendation?

1. Keep the data indefinitely because storage is cheap
2. Collect more fields in case they are useful later
3. Minimize collection to the data actually needed
4. Rely solely on a longer privacy notice