Approval by Data Subject

The approval of a data subjectorauthorized representativeprior to a disclosure as required by 960 CMR 2.13 may be granted in writing or orally, including by telephone; provided, that the agency seeking such approval shall make reasonable efforts to verify the identity of the data subject and the authority of any person representing the data subject; and, provided further, that the agency shall, if no written consent is given, make a notation of an oral approval and shall file such notation with the personal data held.