Energy communities are emerging entities which need their own Information and Communication System. Resilience is a key metric of such communities, and it has to be implemented for both energy supply versus public network outages and for its information system versus cyber-attacks, acting as cyber-citadels which have to resist external malicious attacks while having also digital interactions with external entities. The paper presents solutions for a resilient energy community with appropriate implementations of digital interaction for data exchange, in order to acquire external energy service for specialized companies and to deliver also information and communication-related services for external users. Principles of a Contractual Data Protection Regulation are presented, as an adaptation of data protection tailored for automated energy services and based on secure data exchange. The principles are verified in a demonstration project which has also external entities with digital interaction.