The CJEU issued a ruling providing practical guidance on implementing the data minimisation principle and defining the limits of processing sensitive data for advertising. Companies in the online advertising sector must restrict the data they process in line with the CJEU's decision to ensure compliance with the GDPR.