111 CMR 8.04 - Protection of Confidentiality

(1) The Commissioner shall identify one individual immediately responsible for the personal data system who shall insure that the requirements of 111 CMR 8.00 are followed.

(2) The Commissioner or his designee shall:

(a) inform each MCB employee having responsibility or function in the design, development, operation, or maintenance of the public safety related information (PSRI) system, or the use of any personal data contained therein, of each safeguard required by 111 CMR 8.00 and related rights and remedies, including relevant safeguards required by RMV;

(b) transmit personal data from the register to the RMV solely as indicated in 111 CMR 8.00;

(c) in the case of data held in automated personal data systems, and to the extent feasible with data held in manual personal data systems, maintain a complete and accurate record of every transmission to identified RMV designees;

(d) to the extent such records are maintained pursuant to 111 CMR 8.04(2)(c), make available to a registrant upon his request the identity of all PSRI holders to whom the registrant's personal data has been delivered;

(e) upon an MCB registrant's written request, indicate in writing whether personal data has been transmitted to the RMV pursuant to 111 CMR 8.00, and if so, make such data fully available to him or his authorized representative, unless doing so is prohibited by 111 CMR 8.00 or by any other regulation or statute;

(f) remove personal identifiers relating to a third person when making any disclosure of information to a registrant pursuant to 111 CMR 8.00, except where such third person is an officer or employee of government acting as such.

Notes

111 CMR 8.04