@@ -2092,6 +2092,12 @@ Once the present document is cited in the Official Journal of the European Union
|8| Annex I, Part 1, (2)(g)| “Products with digital elements shall process only data, personal or other, that are adequate, relevant and limited to what is necessary in relation to the intended purpose of the product with digital elements (data minimisation).”| Clause 5.8| U/C | |
|9| Annex I, Part 1, (2)(h)| “Products with digital elements shall protect the availability of essential and basic functions, also after an incident, including through resilience and mitigation measures against denial-of-service attacks.”| Clause 5.9| U/C| |
|10| Annex I, Part 1, (2)(i)| “Products with digital elements shall minimise the negative impact by the products themselves or connected products on the availability of services provided by other products or networks.” | Clause 5.10 | U/C | |
|11| Annex I, Part 1, (2)(j)| “Products with digital elements shall be designed, developed and produced to limit attack surfaces, including external interfaces.”| Clause 5.11 | U/C | |
|12| Annex I, Part 1, (2)(k)| “Products with digital elements shall be designed, developed and produced to reduce the impact of an incident using appropriate exploitation mitigation mechanisms and techniques.”| Clause 5.12 | U/C | |
|13| Annex I, Part 1, (2)(l)| “Products with digital elements shall provide security related information by recording and monitoring relevant internal activity, including the access to or modification of data, services or functions, with an opt-out mechanism for the user.”| Clause 5.13 | U/C | |
|14| Annex I, Part 1, (2)(m)| “Products with digital elements shall provide the possibility for users to securely and easily remove on a permanent basis all data and settings and, where such data can be transferred to other products or systems, ensure that this is done in a secure manner.”| Clause 5.14 | U/C | |
|15| Annex I, Part 2| |Clause 5.15 | U | |
|(2)| in relation to the risks posed to products with digital elements, address and remediate vulnerabilities without delay, including by providing security updates; where technically feasible, new security updates shall be provided separately from functionality updates; | 6.1
|(3)| Apply effective and regular tests and reviews of the security of the product with digital elements; | 6.1
