Collecting Confidential Information

U17: Only the minimum information reasonably necessary to accomplish the intended business purpose should be obtained