219Publication of enforceable undertakings

219 Publication of enforceable undertakings

CEO (1) If: (a) the CEO is an authorised person in relation to a provision mentioned in subsection 218(1); and (b) a person has given an undertaking under section 114 of the Regulatory Powers Act in relation to the provision; and (c) the undertaking has been accepted by the CEO under section 114 of the Regulatory Powers Act; and (d) the undertaking has not been withdrawn or cancelled; the CEO must cause the undertaking to be published on the Regulator’s website. (2) If an undertaking contains personal information (within the meaning of the Privacy Act 1988), the CEO must take such steps as are reasonable in the circumstances to ensure that the information is de‑identified before the undertaking is published under subsection (1). Registrar (3) If: (a) the Registrar is an authorised person in relation to a provision mentioned in subsection 218(1); and (b) a person has given an undertaking under section 114 of the Regulatory Powers Act in relation to the provision; and (c) the undertaking has been accepted by the Registrar under section 114 of the Regulatory Powers Act; and (d) the undertaking has not been withdrawn or cancelled; the Registrar must publish the undertaking on the website of the Registrar’s Department. (4) If an undertaking contains personal information (within the meaning of the Privacy Act 1988), the Registrar must take such steps as are reasonable in the circumstances to ensure that the information is de‑identified before the undertaking is published under subsection (3).