950 CMR 33.00 shall govern the collection, maintenance and disclosure of personal data contained in manual or computerized personal data systems and shall apply to the State Secretary's Office and all agencies therein. These regulations shall not apply to criminal offender record information as defined in M.G.L. c. 6, § 167, or to personal or other data which is not contained in a personal data system. 950 CMR 3.31 shall apply to all agencies required to file notice with the State Secretary under M.G.L. c. 30 § 63.
950 CMR, § 33.02