1. Member States shall ensure that this Article applies at least to breaches on the part of obliged entities that are serious, repeated, systematic, or a combination thereof, of the requirements laid down in:
(a) Articles 10 to 24 (customer due diligence);
(b) Articles 33, 34 and 35 (suspicious transaction reporting);
(c) Article 40 (record-keeping); and
(d) Articles 45 and 46 (internal controls).
2. Member States shall ensure that in the cases referred to in paragraph 1, the administrative sanctions and measures that can be applied include at least the following:
(a) a public statement which identifies the natural or legal person and the nature of the breach;
(b) an order requiring the natural or legal person to cease the conduct and to desist from repetition of that conduct;
(c) where an obliged entity is subject to an authorisation, withdrawal or suspension of the authorisation;
(d) a temporary ban against any person discharging managerial responsibilities in an obliged entity, or any other natural person, held responsible for the breach, from exercising managerial functions in obliged entities;
(e) maximum administrative pecuniary sanctions of at least twice the amount of the benefit derived from the breach where that benefit can be determined, or at least EUR 1 000 000.
3. Member States shall ensure that, by way of derogation from paragraph 2(e), where the obliged entity concerned is a credit institution or financial institution, the following sanctions can also be applied:
(a) in the case of a legal person, maximum administrative pecuniary sanctions of at least EUR 5 000 000 or 10 % of the total annual turnover according to the latest available accounts approved by the management body; where the obliged entity is a parent undertaking or a subsidiary of a parent undertaking which is required to prepare consolidated financial accounts in accordance with Article 22 of Directive 2013/34/EU, the relevant total annual turnover shall be the total annual turnover or the corresponding type of income in accordance with the relevant accounting Directives according to the last available consolidated accounts approved by the management body of the ultimate parent undertaking;
(b) in the case of a natural person, maximum administrative pecuniary sanctions of at least EUR 5 000 000 , or in the Member States whose currency is not the euro, the corresponding value in the national currency on 25 June 2015.
4. Member States may empower competent authorities to impose additional types of administrative sanctions in addition to those referred to in points (a) to (d) of paragraph 2 or to impose administrative pecuniary sanctions exceeding the amounts referred to in point (e) of paragraph 2 and in paragraph 3.