* Preconditions: The system should not reveal any sensitive personal information to other parties, or store unnecessary personal information in the system. * Input conditions / steps: Data stored on the unit and the data transferred on the network * Expected result: No personal information should be present
* Preconditions: The system performance should not be highly dependent on the presence of sensitive personal information in the input data. * Input conditions / steps: Datasets with and without sensitive personal information. *Expected result: Accuracy of results in presence or absence of sensitive personal information in the data should be negligible (less than x%)