Consistent with the purposes of M.G.L. c. 66A and the definitions as set forth in M.G.L. c. 66A, § 1, the following terms shall have the following additional meanings:

Compulsory Legal Process shall mean a demand for personal data that is issued by or through a federal or state court or administrative agency or party to any such litigation, including through summons; subpoena; discovery request; or other demand.

Criminal Offender Record Information (CORI) shall have the same meaning as set forth in M.G.L. c. 6, § 167. Pursuant to the definition contained within M.G.L. c. 66A, § 1, CORI is not “personal data”.

Data Subject shall have the same meaning as set forth in M.G.L. c. 66A, § 1. In addition, “similar entities” excluded from 940 CMR 11.02: Data Subject shall include sole proprietorships or other businesses, and not-for-profit or charitable entities.

Evaluative Information shall have the same meaning as set forth in M.G.L. c. 6, § 167. Pursuant to the definition contained within M.G.L. c. 66A, § 1, evaluative information is not “personal data”.

Intelligence Information shall have the same meaning as set forth in M.G.L. c. 6, § 167. Pursuant to the definition contained within M.G.L. c. 66A, § 1, intelligence information is not “personal data”.

Personal Data shall mean any information concerning an individual which, because of name, identifying number, mark, description, or other such personal identifiers, can be readily associated with a particular individual; provided that such information is not contained in a public record, as defined in M.G.L. c. 4, § 7, clause Twenty-sixth. Personal data shall not include the following:

1. (a) intelligence information, evaluative information, or criminal offender record information;
2. (b) the government employees' or contractors' analysis of personal data (including mental impressions or opinions of, or conclusions, recommendations, or advice based on, or attorney-client privileged communications regarding, such personal data), where such analysis is not, or is not contained in, a public record;
3. (c) information that is protected by statute and/or protective order; or
4. (d) proprietary or financial records or data collected by the AGO from corporations, partnerships, sole proprietorships, trusts, or other business entities.

6/19/26 (Effective 12/5/25) - corrected 940 CMR - 85