Publication of measures and sanctions for breaches of Regulation (EU) 2022/2554

(1) The Bundesanstalt publishes without delay on its website decisions on final measures and unappealable decisions imposing a fine issued on account of breaches of Regulation (EU) 2022/2554 or the delegated acts based on it.
(2) In the publication the Bundesanstalt names the provision that was breached and the natural or legal person or association of persons responsible for the breach.
(3) Where publication of the identity of a legal person affected by the decision, or of the personal data of a natural person, would be disproportionate, or where publication would jeopardise ongoing investigations or the stability of the financial markets, then
1. the Bundesanstalt defers publication of the decision until the reasons for deferral have ceased to apply;
2. the Bundesanstalt publishes the decision without naming the identity or the personal data, where this ensures effective protection of the identity or of the personal data concerned; or
3. the Bundesanstalt does not publish the decision, where publication under nos. 1 and 2 would not be sufficient to ensure that
a) the stability of the financial markets is not jeopardised; or
b) the proportionality of the publication is preserved.
(4) A publication under subsection (1) must be deleted at the latest five years after its publication. In derogation from the first sentence, personal data must be deleted as soon as its publication is no longer necessary.