Can a transaction work without a real name?
Zero Collection
Collect Only What the Function Truly Needs
Design systems to avoid unnecessary accumulation of personal or identity data while still allowing the functional input required for a defined interaction.
What Zero Collection Means
Zero Collection does not mean that a digital system receives no input. It means designing the interaction so the system avoids accumulating personal or identity data that is not necessary for the defined function.
The architectural question is simple: what does the system truly need to know in order to perform the requested task?
The goal is not “no input.” The goal is no unnecessary identity dependency.
Typical Design Questions
Every requested field should be connected to a necessary and clearly defined function.
Can a temporary token replace a persistent identifier?
Can unnecessary profile fields be removed?
Can telemetry avoid direct personal identifiers?
Can the system process the request without building a reusable profile?
From “Collect by Default” to “Justify Every Field”
Traditional systems often collect information because it may be useful later. Zero Collection reverses that assumption.
| Conventional pattern | Zero Collection orientation |
|---|---|
| Ask for identity first | Ask whether identity is required at all |
| Store broad user profiles | Limit inputs to the defined function |
| Keep fields for possible future use | Avoid unspecified future-use collection |
| Link interactions to persistent accounts | Use scoped or transient identifiers where feasible |
Implementation Patterns
Zero Collection begins by examining both visible inputs and secondary technical channels.
Map Every Input
Map every input to a concrete system function. If a field has no necessary role in delivering the function, challenge its presence.
Separate Function from Identity
Where context allows, separate authorization, routing and personalization from durable real-world identity.
Audit the Invisible Collection
Collection also occurs through telemetry, SDKs, logs, cookies, analytics, error reports and connected services. These channels must be reviewed too.
Some systems must process personal data for legal, safety, contractual, security or functional reasons. Zero Collection does not remove those obligations.
Frequently Asked Questions
Does Zero Collection mean a system receives no data?
No. Functional input may still be necessary. The principle is to avoid unnecessary accumulation of personal or identity data.
Is Zero Collection the same as GDPR data minimization?
They can be complementary, but they are not identical. ZDP frames collection as an architectural dependency question rather than a legal compliance guarantee.
Can identity always be removed?
No. Some services need identity for legal, safety, contractual, security or operational reasons. The design goal is to challenge unnecessary identity dependency.
What should be audited first?
Start with forms, account fields, telemetry, analytics, SDKs, logs, cookies and third-party integrations that may collect data outside the primary interface.
Explore the Wider Zero Data Protocol Framework
ZDP treats collection, retention and exploitation as connected architectural questions. Each pillar should be evaluated in context rather than as an isolated compliance promise.
View the ZDP Framework →For research, clarification or collaboration, contact Zero Data Protocol directly.