1. Member States shall ensure that this Article applies at least to breaches on the part of obliged entities that are serious, repeated, systematic, or a combination thereof, of the requirements laid down in:

(a) Articles 10 to 24 (customer due diligence);

(b) Articles 33, 34 and 35 (suspicious transaction reporting);

(c) Article 40 (record-keeping); and

(d) Articles 45 and 46 (internal controls).

2. Member States shall ensure that in the cases referred to in paragraph 1, the administrative sanctions and measures that can be applied include at least the following:

(a) a public statement which identifies the natural or legal person and the nature of the breach;

(b) an order requiring the natural or legal person to cease the conduct and to desist from repetition of that conduct;

(c) where an obliged entity is subject to an authorisation, withdrawal or suspension of the authorisation;

(d) a temporary ban against any person discharging managerial responsibilities in an obliged entity, or any other natural person, held responsible for the breach, from exercising managerial functions in obliged entities;