I once dealt with a bank whose CEO did it without asking:
When they were examined the examiner began cross examining the BSA Officer (a very good one) about the filing and it was clear she did not have a clue what he was talking about. So, he showed her the copy from the data base. She was embarrassed and slightly miffed.
The regulator made the obvious observation in the written report: The bank did not really have a demonstrable policy and procedure for filing SARs because this one was filed contrary to every written statement the bank had made about its processes.
You're in a difficult spot, but you need to go back to the CEO and point out the problems with departing from written commitments. In addition, it will have to be reported to the board, it will have to be retained with the other SARs, etc. Also note that your BSA auditor will need to see it at some point as well.
"SAR confidentiality" does not suggest that only one person in the bank should know about a SAR.
_________________________
In this world you must be oh so smart or oh so pleasant. Well, for years I was smart. I recommend pleasant.