5. Purpose limitation, proportionality, data minimization
Does any law or regulation require that the collection and use of personal data be proportionate, relevant, adequate and limited to what is necessary in relation to the purpose for which it is processed (or similar standard)?