Use or Disclosure of Personal Data by EOHHS

(1) EOHHS shall hold data, including, but not limited to, the names, addresses, and dates of birth of agency clients, as well as any other personal data or identifying information the Secretary shall determine necessary to carry out the responsibilities assigned to the Secretary and EOHHS under M.G.L. c. 6A, § 16. EOHHS shall develop policies and guidelines regarding use, disclosure, and maintenance of such data by agency employees to safeguard the confidentiality of such information. (2) As executive head of all agencies under M.G.L. c. 6A, § 16, the Secretary shall have access to personal data of agency clients held by such agencies. The Secretary may designate others who shall be authorized to access data in the same manner and to the same extent as the Secretary. The Secretary or his designee shall use or disclose such data only in a manner consistent with applicable federal laws, 101 CMR 16.00, and other state laws. A designee shall include, but is not limited to, an agency employee or contractor engaged in evaluative and other quality assurance activities involving agency programs and services.