(A) The executive director of the commission shall be directly responsible for the personal information system maintained by the commission.
(B) The commission shall discipline any employee who initiates or otherwise contributes to any disciplinary or other punitive action taken against another individual who brings to the attention of appropriate authorities, the press, or a member of the public, any evidence of unauthorized use of any material contained in the personal information system.
(C) The commission shall maintain its personal information system with the accuracy, relevance, timeliness, and completeness necessary to assure fairness in any determination made by the commission that is based on information contained in the system.
(D) The commission shall investigate, upon request, the accuracy, relevance, timeliness, and completeness of the personal information which is disputed by the subject of a record contained in its personal information system and report its findings to the disputant within thirty days after receipt of the request.
(E) The commission shall not place personal information into an interconnected or combined system unless said system contributes to the efficiency of other agencies or organizations authorized by law to use the system.
(F) The commission shall not use any personal information placed into an interconnected or combined system by another state or local commission or an organization unless the personal information is necessary and relevant to the performance of a lawful function of the commission.