A requirement can only exist once within a permission group, and all requirements are cumulative across access levels. That is, in order for a user to get data access, they must have completed all requirements for the "data" access level and all preceding levels.