(66)Member States should lay down rules on penalties applicable to infringements of the provisions of this Regulation and ensure that they are implemented. Those penalties should be effective, proportionate and dissuasive and should at least cover cases of gross professional misconduct and lack of due diligence. It should be possible for Member States to provide for administrative or criminal penalties. CESR should establish guidelines on the convergence of practices relating to such penalties.