Application for computer services by any individual or agency customer shall be deemed a representation that such customer has established and is following procedures which protect the right of individuals to the privacy and confidentiality of records concerning them, regardless of whether or not such records are mechanized. Customers shall be responsible for providing such control procedures and mechanisms as are necessary to protect the confidentiality of any particular database.