Limit data collection and exposure through classification, consent, retention, deletion, residency, encryption, audit trails, and privacy-preserving design.
