Connecticut Administrative Code › Title 17 - Public Assistance and Welfare Services › 415(g) - Employee Personnel Files › Personal Data › Section 17-415(g)-10 - Disclosure of personal data

Current through July 10, 2024
(a) Within four
				business days of receipt of a written request therefore, the agency shall mail
				or deliver to the requesting individual a written response in plain language,
				informing him/her as to whether or not the agency maintains personal data on
				that individual, the category and location of the personal data maintained on
				that individual and procedures available to review the records.
(b) Except where nondisclosure is required or
				specifically permitted by law, the agency shall disclose to any person upon
				written request all personal data concerning that individual which is
				maintained by the agency. The procedures for disclosure shall be in accordance
				with Conn. Gen. Stat. §§
									1-15 through 1-21k.
				If the personal data is maintained in coded form, the agency shall transcribe
				the data into a commonly understandable form before the disclosure.
(c) The agency is responsible for verifying
				the identity of any person requesting access to his/her own personal
				data.
(d) The agency is responsible
				for ensuring that disclosure made pursuant to the Personal Data Act is
				conducted so as not to disclose any personal data concerning persons other than
				the person requesting the information.
(e) The agency may refuse to disclose to a
				person medical, psychiatric or psychological data on the person if the agency
				determines that such disclosure would be detrimental to that person.
				Additionally, the agency may refuse to disclose to a person personal data
				pertaining to that person if such nondisclosure is otherwise permitted or
				required by law.
(f) In any case
				where the agency refuses disclosure, it shall advise that person of his/her
				right to seek judicial relief pursuant to the Personal Data Act.
(g) If the agency refuses to disclose
				medical, psychiatric or psychological data to a person based on its
				determination that disclosure would be detrimental to that person and
				nondisclosure is not mandated by law, the agency shall, at the written request
				of such person, permit a qualified medical doctor to review the personal data
				contained in the person's record to determine if the personal data should be
				disclosed. If disclosure is recommended by the person's medical doctor, the
				agency shall disclose the personal data to such person; if non disclosure is
				recommended by such person's medical doctor, the agency shall not disclose the
				personal data and shall inform such person of the judicial relief provided
				under the Personal Data Act.
(h)
				The agency shall maintain a complete log of each person, individual, agency or
				organization who has obtained access or to whom disclosure has been made of
				personal data under the Personal Data Act, together with the reason for each
				such disclosure or access. This log shall be maintained for not less than five
				years from the date of such disclosure or access or for the life of personal
				data record, whichever is longer.
(i) When an individual is asked to supply
				personal data to a state agency, including the agency, the agency shall
				disclose to that individual, upon request:
(1)
				The name of such agency and division within such agency requesting the personal
				data;
(2) The legal authority under
				which such agency is empowered to collect and maintain the personal
				data;
(3) The individual's rights
				pertaining to such records under the Personal Data Act and agency
				regulations;
(4) The known
				consequences arising from supplying or refusing to supply the requested
				personal data; and
(5) The proposed
				use to be made of the requested personal data.