309 CMR, § 2.05
All documentary materials and data made or received by the Board or any employee of the Board, including documentary information concerning any applicant or licensed site professional, shall constitute public records unless such materials or data fall within one or more of the exemptions to the definition of public records in M.G.L. c. 4, § 7. Subject to the restrictions described in the following sentence pertaining to personal data, the Board may, in its discretion, release to the public documentary materials and data which does not constitute a public record. Neither the Board nor its employees shall permit access to any information which qualifies as personal data, as defined by M.G.L. c. 66A, § 1, to any person other than a Board member, an employee of the Board, or the data subject unless such access is authorized by statute or a regulation which is consistent with the purposes of M.G.L. c. 66A or is approved by the data subject whose personal data are sought.
309 CMR, § 2.05