In addition to the functional requirements, there exist some additional requirements.
Section 3.1
describes the system performance requirements, such as size limits of data and allowable operations.
Section 3.2
describes qualitative system characteristics, which includes security and privacy.