GDPR Article 5 - Principles relating to processing of personal data

The three principles that make prompt logging a compliance problem rather than a preference. 1(3) data minimisation - adequate, relevant and limited to what is necessary. 1(5) storage limitation - identifiable data kept in identifiable form no longer than necessary. 1(2) purpose limitation - collected for specified purposes, not further processed incompatibly. 1(7) accountability - the controller must be able to DEMONSTRATE compliance. Logs full of prompt bodies are a data-minimisation failure on their face.