(1) The Bank shall publish any decision imposing an administrative sanction or measure for a contravention of these Regulations or Regulation (EU) No 600/2014 on its website without undue delay after the person on whom the sanction was imposed has been informed of that decision.

(2) The publication shall include at least information on the type and nature of the contravention and the identity of the persons responsible unless the decision is one imposing measures that are of an investigatory nature.

(3) Where the publication of the identity of the legal persons or of the personal data of the natural persons is considered by the Bank to be disproportionate following a case-by-case assessment conducted on the proportionality of the publication of such data, or where publication jeopardises the stability of financial markets or an on-going investigation, the Bank shall -

(a) defer the publication of the decision to impose the sanction or measure until the reasons for non-publication cease to exist,

(b) publish the decision to impose the sanction or measure on an anonymous basis if such anonymous publication ensures an effective protection of the personal data concerned, or