The Canadian policy for privacy Principles Principle 4 Collect only as much as necessary Principle 5 Only should be retained as long as necessary