BSI C5 is becoming a required Information Security standard for companies who use cloud services to collect or store German patient data.