Article 38 - Administrative sanctions and other administrative measures

1.  Without prejudice to the supervisory and investigatory powers of competent authorities under Article 32, and the right of Member States to provide for and impose criminal sanctions, Member States shall, in accordance with national law, provide for competent authorities to have the power to impose administrative sanctions and take appropriate other administrative measures which shall be effective, proportionate and dissuasive. Those administrative sanctions and other administrative measures shall apply at least to:

(a) infringements of Articles 3, 5 and 6, Article 7(1) to (11) and (12a), Articles 8, 9 and 10, Article 11(1) and (3), Article 14a(1), Article 15a(1), Article 16(1), (2) and (3), Articles 17 and 18, Article 19(1), (2) and (3), Article 20(1), Article 21(1) to (4) and (7) to (11), Article 22(2) to (5), Article 23(1), (2), (3), (4a) and (5), and Article 27;
(b) failure to cooperate or comply in an investigation or with an inspection or request covered by Article 32.

Member States may decide not to lay down rules for administrative sanctions as referred to in the first subparagraph where the infringements referred to in point (a) or point (b) of that subparagraph are already subject to criminal sanctions in their national law by 21 July 2018. Where they so decide, Member States shall notify, in detail, to the Commission and to ESMA, the relevant parts of their criminal law.

By 21 July 2018, Member States shall notify, in detail, the rules referred to in the first and second subparagraph to the Commission and to ESMA. They shall notify the Commission and ESMA without delay of any subsequent amendment thereto.

2.  Member States shall, in accordance with national law, ensure that competent authorities have the power to impose at least the following administrative sanctions and other administrative measures in relation to the infringements listed in point (a) of paragraph 1:

(a) a public statement indicating the natural person or the legal entity responsible and the nature of the infringement in accordance with Article 42;
(b) an order requiring the natural person or legal entity responsible to cease the conduct constituting the infringement;
(c) maximum administrative pecuniary sanctions of at least twice the amount of the profits gained or losses avoided because of the infringement where those can be determined;
(d) in the case of a legal person, maximum administrative pecuniary sanctions of at least EUR 5 000 000 , or, in the Member States whose currency is not the euro, the corresponding value in the national currency on 20 July 2017, or 3 % of the total annual turnover of that legal person according to the last available financial statements approved by the management body.

Where the legal person is a parent undertaking or a subsidiary of a parent undertaking which is required to prepare consolidated financial accounts in accordance with Directive 2013/34/EU, the relevant total annual turnover shall be the total annual turnover or the corresponding type of income in accordance with the relevant Union law in the area of accounting according to the last available consolidated accounts approved by the management body of the ultimate parent undertaking;

(e) in the case of a natural person, maximum administrative pecuniary sanctions of at least EUR 700 000, or, in the Member States whose currency is not the euro, the corresponding value in the national currency on 20 July 2017.

3.  Member States may provide for additional sanctions or measures and for higher levels of administrative pecuniary sanctions than those provided for in this Regulation.