Section 6-38b-26 - Disclosure of personal data(a) Any individual may request from the commission whether it maintains personal data on that individual; the category and location of the personal data maintained on that individual and procedures available to review the information. The commission shall, within four business days of receipt of a written request, mail or deliver to the requesting individual a written response in plain language.(b) Except where nondisclosure is required or specifically permitted by law, the commission shall disclose to any person upon request all personal data concerning that person that is maintained by the commission. Such disclosure shall be made so as not to disclose any personal data concerning persons other than the individual requesting such information. The procedures for disclosure shall be in accordance with sections 1-200 to 1-232, inclusive, of the Connecticut General Statutes. If the personal data is maintained in coded form, the commission shall transcribe the data into a commonly understandable form before disclosure.(c) Commission personnel shall verify the identity of any person requesting access to his or her own personal data.(d) The commission may refuse to disclose to a person medical, psychiatric or psychological data regarding that person if it is determined by the commission that such disclosure would be detrimental to the person, or if such non-disclosure is otherwise permitted or required by law. If the commission refuses to disclose medical, psychiatric or psychological data to a person, it shall inform the person of his or her right to seek judicial relief provided by section 4-195 of the Connecticut General Statutes.(e) If the commission refuses to disclose medical, psychiatric or psychological data to a person based on its determination that disclosure would be detrimental to that person and the nondisclosure is not mandated by law, the commission shall, at the written request of such person, permit a qualified medical doctor to review the personal data contained in the person's record to determine if the personal data should be disclosed. If nondisclosure is recommended by such person's medical doctor, the commission shall not disclose the personal data and shall inform such person of the judicial relief provided under section 4-195 of the Connecticut General Statutes.(f) The commission shall maintain a record of each person, individual, agency or organization who has obtained access to or to whom disclosure has been made of personal data in accordance with subsection (c) of section 4-193 of the Connecticut General Statutes, together with a reason for each such disclosure or access. This record shall be maintained for not less than five years from the date of such disclosure or access or for the life of the personal data record, whichever is longer. This record shall be disclosed to any person upon written request.Conn. Agencies Regs. § 6-38b-26
Adopted effective November 4, 2002