1. Each competent authority shall have the minimum investigation and enforcement powers set out in paragraphs 3, 4, 6 and 7 of this Article that are necessary for the application of this Regulation and shall exercise those powers in accordance with Article 10.

2. Notwithstanding paragraph 1, Member States may decide not to confer all the powers on every competent authority, provided that each of those powers can be exercised effectively and as necessary in relation to any infringement covered by this Regulation in accordance with Article 10.

3. Competent authorities shall have at least the following investigation powers:

(a) the power of access to any relevant documents, data or information related to an infringement covered by this Regulation, in any form or format and irrespective of their storage medium, or the place where, they are stored;

(b) the power to require any public authority, body or agency within their Member State or any natural person or legal person to provide any relevant information, data or documents, in any form or format and irrespective of their storage medium, or the place where they are stored, for the purposes of establishing whether an infringement covered by this Regulation has occurred or is occurring, and for the purposes of establishing the details of such infringement, including tracing financial and data flows, ascertaining the identity of persons involved in financial and data flows, and ascertaining bank account information and ownership of websites;