(1) A person who is not an operator of essential services or a relevant digital service provider may notify the CSIRT on a voluntary basis of an incident having a significant impact on the continuity of the services provided by the person.

(2) The CSIRT may prioritise dealing with notifications made under Regulations 18 and 22 over those made under this Regulation.

(3) A notification under this Regulation shall only be processed by the CSIRT where such processing does not constitute a disproportionate or undue burden on the CSIRT.

(4) A notification under this Regulation shall not result in the notifying entity being subject to any obligations to which it would not be subject had it not made the notification.

(5) The CSIRT may provide assistance to a person who makes a notification under this Regulation in relation to the handling of the incident.