108 CMR, § 15.10
CORI records may be disseminated only to individuals, such as the hiring authority or CORI Coordinator, designated by the agency or vendor program to receive such information, and included in the agency or vendor's need to know list. The hiring authority will maintain a listing of persons so designated. Any further dissemination shall be in accordance with DCJIS regulations at 803 CMR 2.00: Criminal Offender Record Information (CORI), and a log of such secondary dissemination shall be maintained in accordance with DCJIS regulations. Willful dissemination of CORI to unauthorized individuals is punishable by a jail sentence of up to one year and/or a fine of $5,000, or in the case of dissemination by an entity that is not a natural person, a fine of up to $50,000. Further in the case of dissemination of juvenile delinquency records such fine may be up to $7,500 and if by an entity not a natural person, up to $75,000.
108 CMR, § 15.10