(9)Information that prospective buyers of non-performing credit agreements need to perform their financial due diligence and valuation of those credit agreements may contain elements that the credit institutions consider confidential on the basis of legal confidentiality requirements, or on the basis of commercial considerations. Credit institutions should therefore determine which data fields are to be considered confidential and should ensure that all confidential information is shared through secure channels and only after appropriate confidentiality arrangements have been put in place between the credit institution and the prospective buyer. Such secure channels may be electronic virtual data rooms set up by the credit institutions to grant access to the prospective buyers to the necessary information. Credit institutions should ensure that such virtual data rooms meet the applicable industry standards for confidentiality and data security.