Without prejudice to the procedures for the withdrawal of authorization or to the provisions of criminal law, Member States shall provide that their respective competent authorities may, with regard to investment firms or those who effectively control the business of such firms that infringe laws, regulations or administrative provisions concerning the supervision or carrying on of their activities, adopt or impose in respect of them measures or penalties aimed specifically at ending observed breaches or the causes of such breaches.