Title 960 CMR 2.00 - Fair Information Practices
- Section 2.01 - Authority
- Section 2.02 - Scope and Application
- Section 2.03 - Fees
- Section 2.04 - Meaning of Terms
- Section 2.05 - Responsible Person
- Section 2.06 - Duties and Responsibilities
- Section 2.07 - Contracts to Hold Personal Data
- Section 2.08 - Personnel Training
- Section 2.09 - Physical Security
- Section 2.10 - Duplicate Files
- Section 2.11 - Notice and Annual Report to the Secretary of State
- Section 2.12 - Audit Trail
- Section 2.13 - Disclosure: Exception for Medical and Psychiatric Emergencies
- Section 2.14 - Approval by Data Subject
- Section 2.15 - Disclosure of Public Records
- Section 2.16 - Invasion of Personal Privacy: General Rule
- Section 2.17 - Invasion of Personal Privacy: General Rule
- Section 2.18 - Response to Compulsory Legal Process
- Section 2.19 - Public Inquiry
- Section 2.20 - Right of Access
- Section 2.21 - Notification of Denial of Access to Data
- Section 2.22 - Objections by Data Subjects
- Section 2.23 - Duties of Responsible Person on Receipt of Objection from a Data Subject
- Section 2.24 - Appeal of Decision of Responsible Person
- Section 2.25 - Failure to Render a Decision
- Section 2.26 - Judicial Relief
- Section 2.27 - Sanctions
- Section 2.28 - Monitoring and Enforcement