隐私保护：该收什么，留多久Privacy Protection: Collect Less, Explain More
小禾设计春游报名表。表格能问家庭住址、定位和生日，但完成报名真的全都需要吗？He designs a trip signup form. It could ask for address, location and birthday. Does signup need all of them?
第 1 步：从目的倒推数据Step 1: Start with the purpose
先说要做什么，再决定收什么。Define the task before collecting data.
隐私不只是把数据藏好。收集、使用、共享和删除都会影响人。目的明确后，选择完成任务所需的数据。报名人数可能只需姓名和班级。持续定位未必与报名有关。收得少，可减少泄露和滥用时的影响，但仍需要合适的安全措施。Privacy involves collection, use, sharing and deletion, not just hiding stored data. Define the purpose and choose what it requires. Signup may need a name and class; continuous location may have no role. Collecting less reduces potential consequences of misuse or leaks, while suitable security remains necessary.
第 2 步：权限与说明要对应Step 2: Match permissions to explanation
点过同意，就能随便使用吗？Does clicking agree justify any later use?
用户需要知道数据为何被用。权限应与具体功能对应。可选用途不应伪装成必需。不同地区的法律要求不同，本页不替代法律判断。小禾把通知联系和公开名单分开。一个用途需要的数据，不该自动扩展到所有用途。People need to understand why data is used. Permissions should match functions, and optional uses should not masquerade as necessities. Legal requirements differ by jurisdiction; this page does not provide legal determinations. He separates contact for notices from a public attendee list. One purpose does not automatically justify all other uses.
第 3 步：从保存到删除Step 3: From retention to deletion
活动结束，名单怎么办？What happens to the list after the trip?
给数据设定合理保存期限。访问权限只给需要的人。到期后按计划删除，备份也应纳入管理。删除姓名不一定完成匿名化：班级和罕见特征可能再次认出个人。隐私管理要考虑整个生命周期，而不是只在收集前弹一次提示。Set a justified retention period and limit access to those who need it. Deletion plans should include backups. Removing names may not anonymize data: class and unusual attributes can identify someone again. Privacy management covers the full lifecycle rather than one notice before collection.
🎮 最少数据报名表🎮 Minimal-data signup form
按四种任务选择必要字段，满足功能同时排除无关收集。Choose necessary fields for four tasks, meeting the purpose without unrelated collection.
一句话记住它：Remember: 隐私保护从明确目的开始，贯穿收集到删除。Privacy begins with a clear purpose and continues through deletion.
安全与隐私相关，但不是同一概念。Security and privacy are related but distinct.权限应对应明确用途。Permissions should have specific purposes.去掉姓名不保证无法重新识别。Removing names does not guarantee anonymity.
把握度：隐私风险管理原则较高；法律义务应按具体地区另行核验。表格为虚构教学情境。Confidence: high for privacy risk principles; legal duties require jurisdiction-specific checking. Forms are fictional teaching scenarios.
AI 辅助制作与资料核对。插图和互动为教学示意。AI-assisted production and source checking. Illustrations and interactions are teaching models.
Back to tree
