Section 17-415(g)-10 - Disclosure of personal data(a) Within four business days of receipt of a written request therefore, the agency shall mail or deliver to the requesting individual a written response in plain language, informing him/her as to whether or not the agency maintains personal data on that individual, the category and location of the personal data maintained on that individual and procedures available to review the records.(b) Except where nondisclosure is required or specifically permitted by law, the agency shall disclose to any person upon written request all personal data concerning that individual which is maintained by the agency. The procedures for disclosure shall be in accordance with Conn. Gen. Stat. §§ 1-15 through 1-21k. If the personal data is maintained in coded form, the agency shall transcribe the data into a commonly understandable form before the disclosure.(c) The agency is responsible for verifying the identity of any person requesting access to his/her own personal data.(d) The agency is responsible for ensuring that disclosure made pursuant to the Personal Data Act is conducted so as not to disclose any personal data concerning persons other than the person requesting the information.(e) The agency may refuse to disclose to a person medical, psychiatric or psychological data on the person if the agency determines that such disclosure would be detrimental to that person. Additionally, the agency may refuse to disclose to a person personal data pertaining to that person if such nondisclosure is otherwise permitted or required by law.(f) In any case where the agency refuses disclosure, it shall advise that person of his/her right to seek judicial relief pursuant to the Personal Data Act.(g) If the agency refuses to disclose medical, psychiatric or psychological data to a person based on its determination that disclosure would be detrimental to that person and nondisclosure is not mandated by law, the agency shall, at the written request of such person, permit a qualified medical doctor to review the personal data contained in the person's record to determine if the personal data should be disclosed. If disclosure is recommended by the person's medical doctor, the agency shall disclose the personal data to such person; if non disclosure is recommended by such person's medical doctor, the agency shall not disclose the personal data and shall inform such person of the judicial relief provided under the Personal Data Act.(h) The agency shall maintain a complete log of each person, individual, agency or organization who has obtained access or to whom disclosure has been made of personal data under the Personal Data Act, together with the reason for each such disclosure or access. This log shall be maintained for not less than five years from the date of such disclosure or access or for the life of personal data record, whichever is longer.(i) When an individual is asked to supply personal data to a state agency, including the agency, the agency shall disclose to that individual, upon request:(1) The name of such agency and division within such agency requesting the personal data;(2) The legal authority under which such agency is empowered to collect and maintain the personal data;(3) The individual's rights pertaining to such records under the Personal Data Act and agency regulations;(4) The known consequences arising from supplying or refusing to supply the requested personal data; and(5) The proposed use to be made of the requested personal data.Conn. Agencies Regs. § 17-415(g)-10