General duty of public bodies
A public body shall not use or disclose personal information except as authorized under this Division.
Every use and disclosure by a public body of personal information must be limited to the minimum amount of information necessary to accomplish the purpose for which it is used or disclosed.
A public body shall limit the use and disclosure of personal information in its custody or under its control to those of its officers, directors, employees or agents who need to know the information to carry out the purpose for which the information was collected or received or to carry out a purpose authorized under section 44.
2013, c.47, s.7; 2017, c.31, s.45