1. ESMA, or the national competent authority where relevant, may withdraw the authorisation of a data reporting services provider where the latter:

(a) does not make use of the authorisation within 12 months, expressly renounces the authorisation or has provided no services for the preceding six months;

(b) obtained the authorisation by making false statements or by any other irregular means;

(c) no longer meets the conditions under which it was authorised;

(d) has seriously and systematically infringed this Regulation.

2. ESMA shall, where relevant, without undue delay, notify the national competent authority in the Member State where the data reporting services provider is established of a decision to withdraw the authorisation of a data reporting services provider.

3. A data reporting services provider from which authorisation is to be withdrawn shall ensure orderly substitution, including the transfer of data to other data reporting services providers, the provision of due notice to its clients and the redirection of reporting flows to other data reporting services providers before the withdrawal.