Without prejudice to Article 16(10) and to their obligations under Union law, Member States may adopt or maintain provisions with a view to achieving a higher level of security of network and information systems.

High

DIRECTIVE (EU) 2016/1148

Article 3