Article 17 MAR: Inside Information Disclosure, Delays, and Penalties

Article 17 of the Market Abuse Regulation requires issuers to disclose inside information to the public as soon as possible, with a narrow set of exceptions that let you delay if three strict conditions are met at the same time. The duty sits in Regulation (EU) No 596/2014 and applies uniformly across EU member states.¹ Miss the timing and you face administrative sanctions; go early on incomplete facts and you risk misleading the market. The sections below walk through what triggers the obligation, when you can legitimately hold back, and the paper trail you need to keep.

What Article 17 Requires

Article 17(1) tells the issuer to inform the public of inside information “as soon as possible.” There is no fixed deadline expressed in hours or days. The standard is that no unjustified delay should occur between the moment the issuer identifies the information and the moment it reaches the market.² Regulators tend to read that phrase strictly. Sitting on information for days without a documented reason invites scrutiny.

The disclosure has to be made in a way that allows fast access and enables a complete, correct, and timely assessment by the public.³ In practice, that means using a regulated news service that reaches all market participants at once. Tipping off analysts or journalists before the general release is exactly what the rule is designed to prevent. After disclosure, the issuer must post the information on its website and keep it accessible for at least five years.²

What Counts as Inside Information

Article 7 defines inside information through four elements that all have to be present. The information must be precise, meaning it points to circumstances or events that have occurred or can reasonably be expected to occur. It must not yet be public. It must relate, directly or indirectly, to one or more issuers or financial instruments. And, if released, it must be the kind of information likely to move the price of the relevant instruments.⁴

The price impact test uses the “reasonable investor” standard: would a reasonable investor be likely to use this information as part of the basis for an investment decision? The test is broad and forward-looking. Unreleased financial results, pending acquisitions, and major contract wins clearly qualify. So do quieter developments like a significant management change, a product recall, or a material shift in the company’s debt position. You cannot wait to see how the market actually reacts before deciding the information mattered.

For commodity derivatives, the definition extends to precise, non-public information relating to the derivative or its underlying spot commodity contract, provided the information is reasonably expected to be disclosed under applicable rules, contracts, or market custom.⁴

Who the Rule Applies To

MAR’s reach is wider than many issuers assume. Article 17 applies to any financial instrument admitted to trading on an EU regulated market, a multilateral trading facility (MTF), or an organised trading facility (OTF), and to instruments for which an admission request has been made. It also catches instruments whose price depends on or affects the price of something traded on one of those venues, including credit default swaps and contracts for difference. Emission allowances and related auction products fall within the regime as well.³ A company whose shares trade only on an MTF carries the same disclosure duties as one on a main regulated market.

When You Can Delay Disclosure

Article 17(4) allows an issuer to postpone disclosure on its own responsibility, but only if three conditions are met at the same time. Fail any one and the delay is not legally justified.

Immediate disclosure would prejudice a legitimate interest. ESMA’s guidelines list examples that qualify, including ongoing merger or acquisition negotiations, situations where the issuer’s financial viability is in grave danger and premature disclosure would jeopardise recovery talks, board decisions that still need approval from another corporate body, intellectual property at risk from early disclosure, and planned purchases or sales of major holdings where disclosure could undermine the transaction.⁵

The delay is not likely to mislead the public. If the withheld information contradicts a previous public statement, holding it back creates a false impression. Told the market a deal was “on track” and now know it is collapsing? Sitting on that news will likely be deemed misleading regardless of how strong the other justifications are.

Confidentiality can be maintained. The issuer must be able to keep the information confidential throughout the delay. If it leaks, or if the issuer can no longer control access, immediate disclosure is required.²

Most compliance failures happen at the second and third conditions rather than the first. Real negotiations are usually easy to point to; managing prior public statements and locking down information access is where issuers slip.

A Separate Delay Path for Banks

Credit institutions and financial institutions have an additional route under Article 17(5). They may delay disclosure of inside information, including information about a temporary liquidity problem or a need for emergency central bank funding, if four conditions are met: disclosure would risk undermining the financial stability of the issuer and the wider system; delay serves the public interest; confidentiality can be maintained; and the competent authority has consented to the delay after being notified.²

Unlike the standard delay, this one needs prior regulatory approval. The competent authority reviews whether the conditions still hold at least weekly and can withdraw consent at any point. If consent is refused, the issuer must disclose immediately.

How to Document a Delay Decision

The moment you decide to delay, start building a contemporaneous record. That record is your primary defence if the regulator later questions the decision. It needs to include:

The date and time the inside information first arose within the organisation, and the date and time the decision to delay was made.
The identities of everyone who made or approved the delay decision.
Evidence showing how each of the three conditions was satisfied: what legitimate interest was at stake, why the delay would not mislead the public, and what confidentiality measures were in place.

Many national regulators publish standardised templates for these internal logs. Practical confidentiality measures typically involve restricting document access to a named group, using code names for sensitive projects, and requiring signed confidentiality undertakings from anyone with access. Regulators reviewing the file after the fact check whether the timeline is consistent, whether confidentiality measures were genuine rather than nominal, and whether the issuer moved promptly once the grounds for delay ceased to exist.

Notifying the Regulator After Disclosure

Immediately after the delayed information is released to the public, the issuer must notify its national competent authority that a delay occurred. The regulation requires the written explanation of how the three conditions were met to be provided upon the authority’s request, not automatically with every notification.² Some national authorities take a stricter approach in practice. The Central Bank of Ireland, for example, expects issuers to provide the explanation through its submission portal whenever a delay has occurred.⁶

Commission Implementing Regulation (EU) 2016/1055 specifies what the notification itself must contain:

The full legal name of the issuer.
The name, position, professional email, and phone number of the person making the notification.
The title of the disclosure statement, any reference number assigned by the dissemination system, and the date and time of public disclosure.
The date and time the delay decision was made, and the identities of all persons responsible for it.⁷

Most regulators accept notifications through secure online portals. Gaps in the submission or a timeline that does not hold together will prompt follow-up questions.

Penalties for Getting It Wrong

Article 30 sets minimum thresholds for administrative sanctions that member states must make available. For breaches of Article 17 specifically, the maximum fines are at least €2,500,000 or 2% of total annual turnover based on the most recent approved accounts (whichever is higher) for companies, and at least €1,000,000 for individuals.¹ These are EU-mandated minimum ceilings; individual member states can and often do set higher ones.

Competent authorities can also impose non-monetary sanctions, including public statements naming the person or entity responsible, cease-and-desist orders, and disgorgement of profits gained or losses avoided through the breach. For more serious violations involving insider dealing or market manipulation rather than a disclosure failure, the ceilings run substantially higher, reaching €15,000,000 or 15% of annual turnover for companies. A late disclosure that also facilitates insider trading can push the issuer into that heavier tier.

Regulators publish their enforcement decisions. A public finding that an issuer withheld material information often does more damage to investor confidence than the fine attached to it.

1
EUR-Lex. Regulation (EU) No 596/2014 of the European Parliament and of the Council
2
Legislation.gov.uk. Regulation (EU) No 596/2014 – Article 17
3
EUR-Lex. Consolidated Text Regulation (EU) No 596/2014
4
Legislation.gov.uk. Regulation (EU) No 596/2014 – Article 7
5
European Securities and Markets Authority. MAR Guidelines – Legitimate Interests
6
Central Bank of Ireland. Notification of Delay in Disclosure of Inside Information
7
EUR-Lex. Commission Implementing Regulation (EU) 2016/1055