1. Member States shall ensure that the competent authorities publish any administrative sanction or other measure that has been imposed for breaches of the national provisions implementing this Directive and against which no appeal was lodged in time, without undue delay, including information on the type and nature of the breach and the identity of persons responsible for it. However, where the publication of the identity of the legal persons, or identity or personal data of natural persons, is considered by the competent authority to be disproportionate following a case-by-case assessment conducted on the proportionality of the publication of such data or where publication jeopardises the stability of financial markets or an ongoing investigation, the competent authority may decide to defer publication, not to publish, or to publish the sanctions on an anonymous basis.

2. Where national law provides for the publication of a decision to impose a sanction or other measure which is subject to an appeal before the relevant judicial or other authorities, the competent authorities shall publish on their official website, without undue delay, such information and any subsequent information on the outcome of such appeal. Moreover, any decision annulling a previous decision to impose a sanction or other measure which has been published shall also be published.

3. Competent authorities shall inform EIOPA of all administrative sanctions and other measures imposed, but not published in accordance with paragraph 1, including any appeal in relation thereto and the outcome thereof.