Administration and Enforcement

(1) Data System Notices to Secretary ofState. EachHolder shall upon the establishment, termination, or change in the character of a personal data system, file a notice with the Massachusetts Secretary of State pursuant to M.G.L. c. 30, § 63. (2) Departmental Power ofReview. The Department may from time to time review the procedures ofa Holder under 760 CMR 8.00. If the Department finds the procedures deficient, the Department shall direct corrective measures. (3) Legal Action. Any Holder which violates a provision of M.G.L. c. 66A may be subject to legal action pursuant to M.G.L. c. 214, § 3B. NON-TEXT PAGE