Recital 44f

Maintaining or restoring the security of a service provided by a service provider and requested by the subscriber or user, or the terminal equipment used for the provision of such service, should only be allowed without consent to the extent that the security measures, such as security updates, are strictly necessary and proportionate, to maintain or restore the security of the service or terminal equipment, are provided separately from functionality updates where technically feasible, and do not introduce changes to functionality, interactions with other software or settings chosen by the subscriber or user beyond what is strictly necessary and proportionate for that security purpose. The subscriber or user has the possibility to turn off the automatic installation of these updates. The maintaining or restoring the security of the service or of the terminal equipment should include in particular cybersecurity and the necessary security requirements to ensure a proper functioning of the terminal equipment as well as the protection of personal data and privacy of the user.