(1) Subject to paragraphs (3) and (4), the Bank shall publish on its official website any administrative penalties which are imposed by the Bank for breach of these Regulations or the Capital Requirements Regulation, including information on -

(a) the type and nature of the breach, and

(b) the identity of the natural or legal person on whom the penalty is imposed,

without undue delay after that person is informed of those penalties.

(2) Where the Bank publishes penalties against which there is an appeal, the Bank shall, without undue delay, also publish on its official website information on the appeal status and outcome thereof.

(3) The Bank shall publish the administrative penalties, referred to in paragraph (1), on an anonymous basis in the following circumstances:

(a) where the penalty is imposed on a natural person and, following an obligatory prior assessment, publication of personal data is found to be disproportionate;

(b) where publication would jeopardise the stability of financial markets or an ongoing criminal investigation;

(c) where publication would cause, insofar as it can be determined, disproportionate damage to the institutions or natural persons involved.