Section 10a-6-11 - Protecting records(a) The Department will insure that all records in manual personal data systems are kept under lock and key and, to the greatest extent practical, are kept in controlled access areas.(b) With respect to automated personal data systems:(1) The Department shall, to the greatest extent practical, locate automated equipment and records in a limited access area;(2) To the greatest extent practical, the Department shall require visitors to such area to sign a visitor's log and permit access to said area on a bona-fide need-to-enter basis only.(3) The Department, to the greatest extent practical, will insure that regular access to automated equipment is limited to operations personnel.(4) The Department shall utilize appropriate access control mechanisms to prevent disclosure of personal data to unauthorized individuals.Conn. Agencies Regs. § 10a-6-11