106It is apparent from the Money Laundering Directive, in particular Articles 5 and 13(1) and recital 24, that the Member States may either set a level of protection higher than that chosen by the EU legislature and authorise or require customer due diligence measures other than those provided for in the directive, pursuant to the power in Article 5, or identify other situations presenting a higher risk in the exercise of the discretion that Article 13 grants to them. In so doing, the Member States may, in particular, identify the specific measures to be applied in certain specified situations or give the institutions and persons covered by the directive discretion to apply, on the basis of an appropriate risk assessment, the measures considered proportionate to the risk at issue in a specific situation.