The Principle of Least Privilege

Following the Principle of Least Privilege makes it easier to comply with common concerns in professional contexts.

We recommend that you implement the Principle of Least Privilege throughout your business not only to improve your data security in general, but in particular to comply to your obligations to your employees as data subjects.

To read more about the theory behind the principle, check out the Wikipedia article.

To read more about your obligation to minimise access to personal data, see GDPR, in particular Article 5.1 (c) and (f): https://gdpr-info.eu/art-5-gdpr/

A legal deep dive is also available in Norwegian at Lovdata, in Lov om behandling av personopplysninger.