Agencies should limit the scope of suspicion-based policing activities to that which is no broader than necessary to acquire the information or evidence that justifies the intrusion in question; and they should take steps to minimize the acquisition of information from third parties who themselves are not properly subject to investigation.