(21)Member States should remain competent to lay down and implement the rules on penalties applicable to the infringement of the obligation on financial institutions and other entities to use, for regulatory purposes, only credit ratings issued by credit rating agencies registered in accordance with Regulation (EC) No 1060/2009.