that are reasonably designed to minimize the acquisition and retention, and to restrict the querying, of covered personal data, and prohibit the dissemination of information derived from covered personal data. (2) Acquisition and retention The procedures adopted under paragraph (1) shall require covered governmental entities to exhaust all reasonable means— (A) to exclude covered personal data that is not subject to 1 or more of the exceptions set forth in clauses (iii) through (vii) of subsection (e)(2)(A) from the data obtained