Each agency shall keep the number of duplicate files of personal data to an absolute minimum and shall

ensure that all duplicate file systems are maintained in a manner consistent with the requirements of 950 CMR 33.00.