DSV: no minimum data security requirements, no corresponding criminal liability, other comments.