Art. 11 (8) DGA:

"The provider of data intermediation services shall take measures to ensure an appropriate level of security for the storage, processing and transmission of non-personal data, and the provider shall further ensure the highest level of security for the storage and transmission of competitively sensitive information."