Response to Compulsory Legal Process

(1) Each agency shall maintain procedures to ensure that no personal data is made available fromits personal data systems in response to a demand for data by compulsory legal process unless the data subject has been notified of such demand in reasonable time to seek to have the process quashed. To fulfill this requirement, the procedures of each agency shall include: (a) an explanation to agency personnel of rules governingthe service ofsubpoenas inconnection with proceedings before state and federal courts and administrative agencies. (b) instructions to bring service of any subpoena immediately to the attention of the responsible person designated under 960 CMR 2.05.