reg 30 Power to direct payment service providers
(1) The Authority may direct a payment service provider to take such steps as are necessary for the purposes of securing compliance with the requirements of Part ... 3 or 4. (2) A direction under paragraph (1) may, in particular, require the payment service provider to— (a) take specified action; (b) refrain from taking specified action; (c) review or take remedial action in respect of past conduct. (3) A payment service provider to which a direction under paragraph (1) is given must comply with the direction.