Each agency shall designate, for each personal data system it maintains, a person to serve as the responsible

person under M.G.L. c. 66A, § 2(a).