Section 16.07 - Safeguarding Personal Data(1) An agency that receives personaldata as a result of a disclosure authorized by 101 CMR 16.00 shall use and hold the date in a manner consistent with federal and state laws, and shall not disclose it to another party unless legally authorized.(2) Reasonable efforts shall be made to limit the access to and use and disclosure of personal data authorized by 101 CMR 16.00 to the minimum necessary to accomplish the purpose for which the access, use, or disclosure is required and permitted.