IT intermediary rules