But that may still be the easiest of ways required by the financial authority - which comes up with its own rules, the EU rules only being the minimum of what regulators in each country must implement. Often regulators want to be stricter, in order appear as "good tax collectors" and to avoid being targeted by social media campaigns etc.