He added that applications will be considered "on a case by case basis and only where collection would pose a risk to the health and safety of the personnel carrying out the collection".
Taken together, the principles of reasonable collection limitation and disposal periods help to minimize the risk that information collected from or about consumers could be used in harmful or unexpected ways.
This includes reviewing the operational risk framework, the effectiveness of the business self-assessment process, and the loss data-collection and reporting activities.