Obliged entities can be made liable for breaches of the AML Regulation and the funds and crypto-asset transfer Regulation, and sanctions and measures can also be imposed on senior management and other natural persons responsible under national law. Supervisors may issue recommendations, order compliance and specific corrective measures, publish statements, order conduct to cease, restrict business, operations or networks or require divestment, withdraw or suspend authorisations, require governance changes, demand data and additional reporting, require stronger policies and controls or specific policies for high-risk clients, transactions or channels, require risk-reducing measures, and impose temporary bans on managers. Measures carry binding deadlines and supervisors follow up implementation; failure to comply with orders, cease-and-desist orders, bans or governance changes can attract periodic penalty payments of up to 3 % of average daily turnover (2 % of daily income for individuals) for up to six months, renewable once.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.