Most solutions need to comply with certain regulations like GDPR.
Avoid reiterating the purpose or details of any such regulations, but dive directly into describing specific impact on the design.
GDPR should have you talk about functionality for protecting and deleting sensitive data etc.