(a) The commission has a single designated personal data system consisting of three parts and whose nature and purpose is to maintain accurate and current information regarding:

            (1) commission case files in fulfillment of its statutory duties under the Freedom of Information Act and chapter 54 of the general statutes;

            (2) the qualifications of employment applicants; and

            (3) employees' employment and personnel activities necessary for the conduct of the commission's business.

(b) The commission's personal data system is both manual and automated and is located at the commission's principal office. The commission is responsible for maintaining the system and requests for disclosure of, or amendment to, information should be made in care of the commission's executive director or managing director. The commission's routine sources of personal data are witnesses, public records, parties, employment applications, personal resumes and department of administrative services and state comptroller forms.