960 CMR 2.11
Notice and Annual Report to the Secretary of State
Each agency shall, by April 1,1978, and uponthe subsequentestablishment, termination, or change
in character of a personal data system, file a report with the Supervisor of Public Records regarding
each personal data system it operates in the manner prescribed below. Such report shall include, but
not necessarily be limited to the following information:
(1) the name of the system;
(2) the nature and purpose of the system;
(3) the number of persons on whom data are or are expected to be maintained;
(4) the categories of data maintained, or to be maintained, indicating which categories are or will be
stored in an automated personal data system;
(5) the agency's policies and practices regarding data storage, retention of data, and disposal thereof;
(6) the categories of data sources;
(7) a description of types of uses made or to be made of data, including a description of all classes
of users of such data;
(8) a description of the actions taken to comply with M.G.L. c. 66A; and
(9) the name, title, and business address of the individual immediately responsible for the system.