Article 27 5.

Member States shall ensure that any decision of the supervisory authorities concerning penalties related to the infringements of the provisions of national law adopted pursuant to this Directive is published, remains publicly available for at least five years and is sent to the European Network of Supervisory Authorities set up under Article 28. The published decision shall not contain any personal data within the meaning of Article 4(1) of Regulation (EU) 2016/679.