What is the requirement regarding the sufficiency and limitation of personal data in relation to its purpose of processing?
Personal data must be sufficient and limited to what is necessary for the purpose of processing.