Data breaches are a matter of when, not if.
And it's only getting worse.
The only way to ensure an organization will not eventually leak personal data is when it does not have it.
Data minimization should be a fundamental practice for every organization.