Minimization

(a) Minimization of collecting, retaining, using, and disclosing A regulated entity may not collect, retain, use, or disclose personal reproductive or sexual health information, except as is strictly necessary to provide a product or service that the individual to whom such information relates has requested from such regulated entity. (b) Minimization of employee access A regulated entity shall restrict access to personal reproductive or sexual health information by the employees or service providers of such regulated entity to such employees or service providers for which access is necessary to provide a product or service that the individual to whom such information relates has requested from such regulated entity.