Article 48
1.
Member States shall require the competent authorities to monitor effectively, and to take the measures necessary to ensure, compliance with this Directive.
1a.
In order to facilitate and promote effective cooperation, and in particular the exchange of information, Member States shall communicate to the Commission the list of competent authorities of the obliged entities listed in Article 2(1), including their contact details. Member States shall ensure that the information provided to the Commission remains updated.
The Commission shall publish a register of those authorities and their contact details on its website. The authorities in the register shall, within the scope of their powers, serve as a contact point for the counterpart competent authorities of the other Member States. The financial supervisory authorities of the Member States shall also serve as a contact point for EBA.
In order to ensure the adequate enforcement of this Directive, Member States shall require that all obliged entities are subject to adequate supervision, including the powers to conduct on-site and off-site supervision, and shall take appropriate and proportionate administrative measures to remedy the situation in the case of breaches.
2.
Member States shall ensure that the competent authorities have adequate powers, including the power to compel the production of any information that is relevant to monitoring compliance and perform checks, and have adequate financial, human and technical resources to perform their functions. Member States shall ensure that staff of those authorities are of high integrity and appropriately skilled, and maintain high professional standards, including standards of confidentiality, data protection and standards addressing conflicts of interest.
3.
In the case of credit institutions, financial institutions, and providers of gambling services, competent authorities shall have enhanced supervisory powers.
4.
Member States shall ensure that competent authorities of the Member State in which the obliged entity operates establishments supervise the respect by those establishments of the national provisions of that Member State transposing this Directive.
In the case of credit and financial institutions that are part of a group, Member States shall ensure that, for the purposes laid down in the first subparagraph, the competent authorities of the Member State where a parent undertaking is established cooperate with the competent authorities of the Member States where the establishments that are part of group are established.
In the case of the establishments referred to in Article 45(9), supervision as referred to in the first subparagraph of this paragraph may include the taking of appropriate and proportionate measures to address serious failings that require immediate remedies. Those measures shall be temporary and be terminated when the failings identified are addressed, including with the assistance of or in cooperation with the competent authorities of the home Member State of the obliged entity, in accordance with Article 45(2).
5.
Member States shall ensure that the competent authorities of the Member State in which the obliged entity operates establishments shall cooperate with the competent authorities of the Member State in which the obliged entity has its head office, to ensure effective supervision of the requirements of this Directive.
In the case of credit and financial institutions that are part of a group, Member States shall ensure that the competent authorities of the Member State where a parent undertaking is established supervise the effective implementation of the group-wide policies and procedures referred to in Article 45(1). For that purpose, Member States shall ensure that the competent authorities of the Member State where credit and financial institutions that are part of the group are established cooperate with the competent authorities of the Member State where the parent undertaking is established.
6.
Member States shall ensure that when applying a risk-based approach to supervision, the competent authorities:
(a)
have a clear understanding of the risks of money laundering and terrorist financing present in their Member State;
(b)
have on-site and off-site access to all relevant information on the specific domestic and international risks associated with customers, products and services of the obliged entities; and
(c)
base the frequency and intensity of on-site and off-site supervision on the risk profile of obliged entities, and on the risks of money laundering and terrorist financing in that Member State.
7.
The assessment of the money laundering and terrorist financing risk profile of obliged entities, including the risks of non-compliance, shall be reviewed both periodically and when there are major events or developments in their management and operations.
8.
Member States shall ensure that competent authorities take into account the degree of discretion allowed to the obliged entity, and appropriately review the risk assessments underlying this discretion, and the adequacy and implementation of its internal policies, controls and procedures.
9.
In the case of the obliged entities referred to in point (3)(a), (b) and (d) of Article 2(1), Member States may allow the functions referred to in paragraph 1 of this Article to be performed by self-regulatory bodies, provided that those self-regulatory bodies comply with paragraph 2 of this Article.
10.
By 26 June 2017, the ESAs shall issue guidelines, addressed to competent authorities, in accordance with Article 16 of Regulation (EU) No 1093/2010, on the characteristics of a risk-based approach to supervision and the steps to be taken when conducting supervision on a risk-based basis. From 1 January 2020, EBA shall, where appropriate, issue such guidelines. Specific account shall be taken of the nature and size of the business, and, where appropriate and proportionate, specific measures shall be laid down.