Data minimization requirements are an increasing focus of privacy laws around the world, including state privacy laws in the US. Minimizing the amount of consumer data that companies collect and use is important, because it limits the amount of data that could be exposed to privacy or security risks and promotes responsible use of data. However, data minimization obligations must also recognize that companies need to use data for expected purposes, so that consumers can continue to benefit from new technology products and services.