In my opinion this is covered with day 12, but not so detailed. The details should be clarified in a specification or interaction with the team-members. For example it’s necessary to test the new requirements relating to the european “General Data Protection Regulation” - must i really transfer all customer data (e.g. age, sex) to a third party (like in my mindmap to the distributor)?