Article 56 2

(a)

issue recommendations;

(b)

order obliged entities to comply, including to implement specific corrective measures;

(c)

issue a public statement which identifies the natural or legal person and the nature of the breach;

(d)

issue an order requiring the natural or legal person to cease the conduct and to desist from repetition of that conduct;

(e)

restrict or limit the business, operations or network of institutions comprising the obliged entity, or to require the divestment of activities;

(f)

where an obliged entity is subject to an authorisation, withdraw or suspend the authorisation;

(g)

require changes in the governance structure.