S.L. 460.41 Art. 27Voluntary notification of relevant information. 

(1) In addition to the notification obligation provided for in article 20, notifications may be submitted to the national CSIRT

on a voluntary basis by:

(a) essential and important entities with regard to incidents, cyber threats and near misses;

(b) entities other than those in sub-article (1)(a), regardless of whether they fall within the scope of this order, with regard to significant incidents, cyber threats and near misses.

(2) The national CSIRT shall process the notifications in sub-article (1) in accordance with the procedure established in article 20 and may prioritise the processing of mandatory notifications over voluntary notifications.

(3) Where applicable, the national CSIRT shall provide the CIP Department and where designated the competent authority, with the information about notifications received pursuant to this article, while ensuring the confidentiality and appropriate protection of the information provided by the notifying entity.

(4) Without prejudice to the prevention, investigation, detection and prosecution of criminal offences, voluntary reporting shall not result in the imposition of any additional obligations upon the notifying entity to which it would not have been subject had it not submitted the notification.