(1) The Authority may direct a payment service provider to take such steps as are necessary for the purposes of securing compliance with the requirements of Part 3 or 4.

(2) A direction under paragraph (1) may, in particular, require the payment service provider to -

(a) take specified action;

(b) refrain from taking specified action;

(c) review or take remedial action in respect of past conduct.

(3) A payment service provider to which a direction under paragraph (1) is given must comply with the direction.