Article 21 › 3

By means of the administrative measures referred to in paragraph 2, the Authority may in particular: (a) require the provision of any data or information necessary for the fulfilment of tasks listed in Article 5(2) without undue delay, require the submission of any document, or impose additional or more frequent reporting requirements; (b) require the reinforcement of the internal policies, procedures and controls; (c) require the application of a specific policy or requirements relating to categories of, or individual, clients, transactions, activities or delivery channels that pose high ML/TF risks; (d) require the implementation of measures to decrease the ML/TF risks in the activities and products of selected obliged entities; (e) temporarily ban any person exercising managerial responsibilities in the selected obliged entity, or any other natural person held responsible for the breach, from exercising managerial functions in obliged entities.

← 2 · All articles · 4 →

Source: EUR-Lex CELLAR · retrieved 2026-09-04