Data minimization is a big one. If you think about it, companies collect far too much data which they don't even need. That data is then vulnerable to being leaked.
In fact, even if it isn't leaked, sucking up a ridiculous amount of data you don't need can still be troublesome.
Even if the government isn't telling you to do it (lol), it can still be helpful from a security / privacy / user experience perspective to do when writing code.