- (1) Sanctions. Employees of a Holder. Any employee of the holder found breaching the confidentiality of data subjects through the violation of 965 CMR 2.00 shallbe subject to reprimand, suspension, dismissal, or other disciplinary measures by the State Auditor consistent with the Personnel Manual of the Department and may be denied future access to or contact with personaldata and removed from any holding responsibilities relative to such information.