Article 24
Publication of administrative penalties and other administrative measures
1.
Member States shall ensure that the provisions of national law transposing this Directive include rules requiring that administrative penalties and other administrative measures be published without undue delay on the official websites of the competent authorities designated pursuant to Article 18(2). The same obligations apply where a Member State decides to provide for criminal penalties pursuant to the second subparagraph of Article 23(1).
2.
The rules adopted pursuant to paragraph 1 shall require at a minimum the publication of any decision which cannot or can no longer be appealed, and which is imposed for breach of the provisions of national law transposing this Directive.
3.
Member States shall ensure that such a publication includes information on the type and nature of the breach and the identity of the natural or legal person on whom the penalty or measure is imposed. Subject to paragraph 4, Member States shall further ensure that such information is published without undue delay after the addressee has been informed of that penalty or measure as well as of the publication of the decision imposing that penalty or measure on the official websites of the competent authorities designated pursuant to Article 18(2).
4.
Where Member States permit publication of a decision imposing penalties or other measures against which an appeal is pending, the competent authorities designated pursuant to Article 18(2) shall, without undue delay, also publish on their official websites information on the status of the appeal and the outcome thereof.
5.
Member States shall ensure that the competent authorities designated pursuant to Article 18(2) publish the decision imposing penalties or measures on an anonymous basis and in accordance with national law, in any of the following circumstances:
(a)
where the penalty or measure is imposed on a natural person and the publication of personal data is found to be disproportionate;
(b)
where publication would jeopardise the stability of financial markets or an ongoing criminal investigation;
(c)
where publication would cause, insofar as it can be determined, disproportionate damage to the credit institutions or the natural persons involved.
6.
Where a Member State publishes a decision imposing a penalty or measure on an anonymous basis, it may allow for the publication of the relevant data to be postponed.
7.
Member States shall ensure that any final court ruling that annuls a decision imposing a penalty or measure is also published.
8.
Member States shall ensure that any publication referred to in paragraphs 2 to 6 remains on the official websites of the competent authorities designated pursuant to Article 18(2) for at least five years from the date of publication. Personal data contained in the publication shall only be retained on the official website for the period which is necessary and in accordance with the applicable personal data protection rules. Such a retention period shall be determined taking into account the limitation periods provided for in the legislation of the Member States concerned but shall in no case be longer than ten years.
9.
The competent authorities designated pursuant to Article 18(2) shall inform EBA of any administrative penalties and other administrative measures imposed, including, where relevant, any appeal in relation thereto and the outcome thereof. Member States shall ensure that those competent authorities receive information and details of the final judgement in relation to any criminal penalty imposed, which those competent authorities shall also submit to EBA.
10.
EBA shall maintain a central database of administrative penalties and other administrative measures communicated to them. That database shall be accessible only to the competent authorities designated pursuant to Article 18(2) and shall be updated on the basis of the information provided by those competent authorities in accordance with paragraph 9 of this Article.