OWASPASVS 5.0 requirement

ASVS-V11.7.2 Data minimization ensures the minimal amount of data is exposed during processing, and ensure that data is encrypted immediately after use…

L3 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V11 Cryptography
Section
V11.7 In-Use Data Cryptography
Level
L3 (requirement applies from this verification level up)

Requirement

Verify that data minimization ensures the minimal amount of data is exposed during processing, and ensure that data is encrypted immediately after use or as soon as feasible.