(3)The shorter the data history, the more difficult it is to estimate risk parameters. With a view to ensuring that the data waiver permission is limited to a small subset of institution assets, a maximum quantitative threshold should be set, both at the level of the exposure value and at the level of the IRB Approach and the Standardised Approach calculated risk-weighted exposures amount for which the permission for the data waiver can be granted. For the same purpose, portfolios where composition of types of exposures firmly characterised by few or no defaults observed should be explicitly excluded from the scope of application of the permission for data waiver.