Depends on your policy.

You can have a policy of "we are not allowed to publish personally identifying info of anyone."

You can have a policy of "we are allowed to publish personally identifying info of anyone at will," but you need to realize that it will also affect people you like as well as people you don't like.

What doesn't work is "we are allowed to publish personally identifying info of people that a sizable minority of the community thinks sucks."