Define the principle of “minimum necessary”?

Answer: a covered entity must make reasonable efforts to use, disclose and request only the minimum amount of PHI needed to accomplish the intended purpose of it’s use