Personal data Required
Store only the personal data you need
Add a personal data column only when a feature needs it, and write down why. GDPR Article 5 asks for data that is limited to its purpose.
How to do it
Keep a list of every column that holds personal data, with its purpose and legal basis. Prefer a year of birth to a full date, or a country to an address, when that is enough. The data minimisation rule covers what the site collects.
How to check
Every personal data column appears in the list with a purpose. A script compares the list with the schema and fails on unlisted columns.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers data playbook: https://agentwranglers.se/playbook/data/personal-data/minimal-columns.