The GDPR sets out principles for all processing: lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; accountability, which requires being able to demonstrate compliance.
Example
Only collect the fields necessary for the stated purpose.