Section 4B. The secretary may, notwithstanding section 45 of chapter 30 and chapter 31, appoint a qualified individual to serve as commonwealth chief privacy officer, who shall serve at the pleasure of the secretary. The chief privacy officer shall promote privacy and security in the use and dissemination of sensitive data, and shall serve as an ombudsperson to effectuate resolution of concerns regarding privacy and security in the use of data.