Data Minimization
Government services collect only information reasonably required to process a request, maintain a registry record or operate an authorized state system.
Controlled Access
Personal and restricted administrative data is available only to authorized roles with an operational need. Public interfaces must not disclose internal credentials or protected records.
Integrity and Security
Systems handling protected data must use authenticated access, prepared database statements and output escaping appropriate to the interface.
Retention and Deletion
Records are retained according to administrative purpose and applicable archive policy. Destructive actions require an authorized process and must not be performed through public GET requests.