1. Member States shall ensure that the competent authorities publish on their official website at least any administrative penalties against which there is no appeal and which are imposed for breach of the national provisions transposing this Directive or of Regulation (EU) No 575/2013, including information on the type and nature of the breach and the identity of the natural or legal person on whom the penalty is imposed, without undue delay after that person is informed of those penalties.

Where Member States permit publication of penalties against which there is an appeal, competent authorities shall, without undue delay, also publish on their official website information on the appeal status and outcome thereof.

2. Competent authorities shall publish the penalties on an anonymous basis, in a manner in accordance with national law, in any of the following circumstances:

(a) where the penalty is imposed on a natural person and, following an obligatory prior assessment, publication of personal data is found to be disproportionate;

(b) where publication would jeopardise the stability of financial markets or an ongoing criminal investigation;

(c) where publication would cause, insofar as it can be determined, disproportionate damage to the institutions or natural persons involved.

Alternatively, where the circumstances referred to in the first subparagraph are likely to cease within a reasonable period of time, publication under paragraph 1 may be postponed for such a period of time.