The canadian policy for privacy

Principles

Principle 4

Collect only as much as necessary

Principle 5

Only should be retained as long as necessary