How about "data accuracy" - you are obliged to make sure that data you store are accurate and be able to prove that you've asked users to confirm that data are

How about "data accuracy" - you are obliged to make sure that data you store are accurate and be able to prove that you've asked users to confirm that data are accurate. How about the duty to export user data on request? How about player consent management? Consent updates, etc. Those are not simple thing neither to implement nor to manage, especially if someone will accuse you and you need to prove that you are compliant.