Yet if the Regulator subsequently revises their opinion and decides that a director is no longer “fit and proper” it’s not as clear that there are comparably explicit powers to remove that person.
Likewise, the legal restrictions on confidentiality (especially those coming from EU directives) can, at least as they have been interpreted up to now, greatly circumscribe regulatory freedom of action to the point that the Regulator can end up appearing passive and defensive.