They will not be able to set up new accounts and existing profiles must be deactivated - while companies could face fines for not complying.