[PeterStuer]

We find there is a core tension between GDPR's principle of data minimization (take no more than strictly necessary), and SaaS practice of data driven innovation (collect everything, then try to figure out what is useful)