1.  The competent authority shall, on an annual basis, provide ESMA with aggregate information regarding all administrative sanctions and other administrative measures imposed in accordance with Article 38. ESMA shall publish that information in an annual report.

Where Member States have chosen, in accordance with Article 38(1), to lay down criminal sanctions for the infringements of the provisions referred to in that paragraph, their competent authorities shall provide ESMA annually with anonymised and aggregated data regarding all criminal investigations undertaken and criminal sanctions imposed. ESMA shall publish data on criminal sanctions imposed in an annual report.

2.  Where the competent authority has disclosed administrative sanctions, other administrative measures or criminal sanctions to the public, it shall simultaneously report them to ESMA.

3.  Competent authorities shall inform ESMA of all administrative sanctions or other administrative measures imposed but not published in accordance with point (c) of the first subparagraph of Article 42(2) including any appeal in relation thereto and the outcome thereof. Member States shall ensure that competent authorities receive information and the final judgment in relation to any criminal sanction imposed and submit it to ESMA. ESMA shall maintain a central database of sanctions communicated to it solely for the purposes of exchanging information between competent authorities. That database shall be accessible only to competent authorities and it shall be updated on the basis of the information provided by the competent authorities.