Section 10-293-47 - Protecting records(a) The board will insure that all records in manual personal data systems are kept under lock and key and, to the greatest extent practical, are kept in controlled access areas.(b) With respect to automated personal data systems:(1) the board shall, to the greatest extent practical, locate automated equipment and records in a limited access area;(2) to the greatest extent practical, the board shall require visitors to such area to sign a visitors log and permit access to said area on a bona-fide need-to-enter basis only;(3) the board, to the greatest extent practical, will insure that regular access to automated equipment is limited to operations personnel; and(4) the board shall utilize appropriate access control mechanisms to prevent disclosure of personal data to unauthorized individuals.Conn. Agencies Regs. § 10-293-47