; and (D) with respect to event data recorder information, that complies with the collection and sharing requirements under the FAST Act ( Public Law 114–94 ). (3) Cybersecurity The minimization of cybersecurity risks to safety and the exchange of information about any vulnerabilities discovered from field incidents, internal testing, or external security research. (4) Human-machine interface (A) The methods of informing the human driver or operator about whether the automated driving system is functioning properly. (B) For a Level 3 vehicle, the methods to address driver reengagement. (C) The use of a human-machine interface by people with disabilities through visual, auditory, or haptic displays, or other methods. (5) Crashworthiness Practicable protection for all occupants given any planned seating positions or interior configurations. (6) Capabilities The capabilities and limitations of the highly automated vehicle or automated driving system. (7) Post-crash behavior The post-crash behavior of the highly automated vehicle or automated driving system if sensors or critical systems are damaged in a crash. (8) Account for applicable laws The account of applicable traffic laws and rules of the road, based on operational design domain, in the development of a highly automated vehicle or automated driving system. (9) Automation function (A) The expected operational design domain in which the highly automated vehicle or automated driving system is designed to operate, including any roadway and infrastructure assets required for the operation of the highly automated vehicle or automated driving system, such as roadside equipment, pavement markings, signage, and traffic signals, and how it will respond if that operational design domain unexpectedly changes. (B) The automated driving system’s expected object and event detection and response capabilities, including behavioral competencies and crash avoidance capability. (C) The ability of the highly automated vehicle or automated driving system to transition to a