Table 12.

Summary of the most used categories.

No	Category	Most used
1	Type of law	Policy, statutory law, regulation, and directive
2	Jurisdiction	Norway and European Union
3	Requirement type	Security requirement
4	Responsibility level	Management
5	Security requirement category	Data processing, data protection officer, right of access, security by design, access control, email processing, logs, password, encryption, and health data storage
6	Privacy requirement category	Consent, disclosure of health data, privacy by design, right of access, and data protection