Every holder, as that term is defined in section one of chapter sixty-six A, shall, on or before September first, nineteen hundred and seventy-six, or upon the subsequent establishment, termination, or change in the character of such personal data system, file with the state secretary a notice which shall specify:—\n(a) the name of the system;\n(b) the nature and purpose of the system;\n(c) the number of persons on whom data are or are expected to be maintained;\n(d) the categories of data maintained, or to be maintained, indicating which categories are or will be stored in an automated personal data system;\n(e) the agency's policies and practices regarding data storage, retention of data, and disposal thereof;\n(f) the categories of data sources;\n(g) a description of types of uses made or to be made of data, including a description of all classes of users of such data;\n(h) a description of the actions taken to comply with chapter sixty-six A; and\n(i) the name, title, and business address of the individual immediately responsible for the system.\nThe state secretary shall, at least once annually, publish a report containing all of the notices filed pursuant to this nd business address of the individual immediately responsible for the system.\nThe state secretary shall, at least once annually, publish a report containing all of the notices filed pursuant to this section during said year. Such report and the separate notices shall be a public record as defined in paragraph twenty-six of section seven of chapter four.
Massachusetts Legal Code