(21)

the following articles are inserted: ‘Article 28a Breaches Article 28b shall apply at least to the following breaches: (a) failure by the issuer to make public, within the required time limit, information required under the national provisions adopted in transposition of Articles 4, 5, 6, 14 and 16; (b) failure by the natural or the legal person to notify, within the required time limit, the acquisition or disposal of a major holding in accordance with the national provisions adopted in transposition of Articles 9, 10, 12, 13 and 13a. Article 28b Sanctioning powers 1. In the case of breaches referred to in Article 28a, competent authorities shall have the power to impose at least the following administrative measures and sanctions: (a) a public statement indicating the natural person or the legal entity responsible and the nature of the breach; (b) an order requiring the natural person or the legal entity responsible to cease the conduct constituting the breach and to desist from any repetition of that conduct; (c) administrative pecuniary sanctions of; (i) in the case of a legal entity, — up to EUR 10 000 000 or up to 5 % of the total annual turnover according to the last available annual accounts approved by the management body; where the legal entity is a parent undertaking or a subsidiary of a parent undertaking which has to prepare consolidated financial accounts pursuant to Directive 2013/34/EU, the relevant total turnover shall be the total annual turnover or the corresponding type of income pursuant to the relevant accounting Directives according to the last available consolidated annual accounts approved by the management body of the ultimate parent undertaking, or — up to twice the amount of the profits gained or losses avoided because of the breach, where those can be determined, whichever is higher; (ii) in the case of a natural person: — up to EUR 2 000 000, or — up to twice the amount of the profits gained or losses avoided because of the breach, where those can be determined, whichever is higher. In Member States where the euro is not the official currency, the corresponding value to euro in the national currency shall be calculated taking into account the official exchange rate on the date of entry into force of Directive 2013/50/EU of the European Parliament and of the Council of 22 October 2013 amending Directive 2004/109/EC of the European Parliament and of the Council on the harmonisation of transparency requirements in relation to information about issuers whose securities are admitted to trading on a regulated market, Directive 2003/71/EC of the European Parliament and of the Council on the prospectus to be published when securities are offered to the public or admitted to trading and Commission Directive 2007/14/EC laying down detailed rules for the implementation of certain provisions of Directive 2004/109/EC (24). 2. Without prejudice to the powers of competent authorities under Article 24 and the right of Member States to impose criminal sanctions, Member States shall ensure that their laws, regulations or administrative provisions provide for the possibility of suspending the exercise of voting rights attached to shares in the event of breaches as referred to in point (b) of Article 28a. Member States may provide that the suspension of voting rights is to apply only to the most serious breaches. 3. Member States may provide for additional sanctions or measures and for higher levels of administrative pecuniary sanctions than those provided for in this Directive. Article 28c Exercise of sanctioning powers 1. Member States shall ensure that, when determining the type and level of administrative sanctions or measures, the competent authorities take into account all relevant circumstances, including where appropriate: (a) the gravity and the duration of the breach; (b) the degree of responsibility of the natural person or legal entity responsible; (c) the financial strength of the natural person or legal entity responsible, for example as indicated by the total turnover of the legal entity responsible or the annual income of the natural person responsible; (d) the importance of profits gained or losses avoided by the natural person or legal entity responsible, in so far as they can be determined; (e) the losses sustained by third parties as a result of the breach, in so far as they can be determined; (f) the level of cooperation of the natural person or legal entity responsible with the competent authority; (g) previous breaches by the natural person or legal entity responsible. 2. The processing of personal data collected in or for the exercise of the supervisory and investigatory powers in accordance with this Directive shall be carried out in accordance with Directive 95/46/EC and Regulation (EC) No 45/2001 where relevant.