960 CMR 2.00 shall govern the collection, maintenance and disclosure of personal data contained in manual or computerized personal data systems and shall apply to the State Treasurer's Office and all agencies and boards thereunder. 960 CMR 2.00 shall not apply to criminal offender record information as defined in M.G.L. c. 6, § 167, or to personal or other data which is not contained in a personal data system
960 CMR, § 2.02