; (xv) has had a large amount of funds returned under section 484B; or (xvi) in the case of proprietary institutions of higher education, have experienced a change in ownership or control of the institution, including a buyout. (B) Criteria for risk-based reviews The Secretary shall publish, and update as necessary, the specific criteria that the Secretary will use to determine which institutions of higher education are selected for risk-based reviews under subparagraph (A). (4) Public disclosure of violations The Secretary shall— (A) post on the College Navigator website, or any successor website, of the Department, the name of each institution of higher education that is found to have violated a provision of this title knowingly and willfully or with gross negligence; (B) indicate on such website, with respect to each such institution, which of the provisions of this title the institution violated; and (C) maintain such posting until the date the institution of higher education rectifies the violation or the date that is 1 year after the date the Secretary issues the final program review report under subsection (c)(6)(C) with respect to such institution, whichever date is later. (5) Institutional disclosure of violations Each institution of higher education that is found to have violated a provision of this title knowingly and willfully or with gross negligence shall— (A) not later than 15 days after the date of issuance of the final program review report containing the finding, post on the home page of the institution’s website that the institution has been found to have violated a provision of this title knowingly and willfully or with gross negligence, including the provision the institution was found to have violated; (B) maintain such posting until the date the institution rectifies the violation or the date that is 1 year after the date the Secretary issues the final program review report under subsection (c)(6)(C) with respect to such institution, whichever date is later