minimum necessary

"When using or disclosing protected health information or when requesting protected health information from another covered entity, a covered entity must make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose of the use, disclosure, or request." (45CFR § 164.502(b)(2)(v))

• Health Care Information Portability and Accountability Act of 1996