Implement retention schedules: define how long each type of data will be kept and automate deletion when the period expires. - Store data at the lowest level of identifiability needed for each purpose. If aggregate statistics suffice, don't store individual records.