Pursuant to its authority and responsibilities in M.G.L. c. 6, §§ 167A and 172, if DCJIS detects a possible violation or breach of security associated with a CJIS user or agency, it may immediately deactivate the account of the user or agency pending further investigation and take appropriate action to ensure the security and confidentiality of CJIS information.
803 CMR, § 7.15