Excessive information is information/personal data that is not required for the purpose of processing. Any data controller that requests information/personal data from a data subject should be able to justify the reasons for seeking each piece of personal data. So, when booking a dental appointment the dentist will need to know for example the patient’s name and contact details but they would never need to know what kind of car a patient drives.