The system must be developed in compliance with GDPR
Since the system is being developed for EU, the system must be GDPR compliant.