The competent authority may withdraw the authorisation issued to a data reporting services provider where the provider:
(a) does not make use of the authorisation within 12 months, expressly renounces the authorisation or has provided no data reporting services for the preceding six months, unless the Member State concerned has provided for authorisation to lapse in such cases;
(b) has obtained the authorisation by making false statements or by any other irregular means;
(c) no longer meets the conditions under which authorisation was granted;
(d) has seriously and systematically infringed the provisions of this Directive or of Regulation (EU) No 600/2014.