|(2)(g)|Data minimisation — only adequate and necessary data shall be processed || REQ-5.3-01, REQ-5.3-02, REQ-5.3-03, REQ-5.3-04, REQ-5.4-01, REQ-5.4-02
|(2)(h)| Ensure availability of essential functions including resilience and DoS protection | REQ-5.1-04, REQ-5.1-05, REQ-5.1-06
|(2)(i) |Avoid degradation of other systems’ availability (non-interference)
|(2)(j) |Limit attack surfaces including external interfaces
|(2)(k)| Include appropriate exploitation mitigation techniques
|(2)(l) |Logging and internal monitoring of data/function access, with opt-out
|(2)(m) |Allow users to permanently remove data and settings securely