Glossary
Data Minimization
Data minimization is the practice of limiting what a system collects, how long it keeps it, and who or what can see it, to only what's actually required for the system's stated purpose — rather than gathering broadly on the chance it might be useful someday. A field that's never used for anything is a field that adds risk without adding value.
The connection to authorization is direct: every piece of data a system holds is something an access-control decision has to be made about, and every access-control decision is a place a mistake can happen. Minimizing the data reduces the surface those decisions have to cover in the first place, which is a different and complementary strategy to getting each individual decision right.