Records shall be made available at the office of the privacy compliance officer or at the location at which they are maintained. Whenever practicable, records shall be made available at an office near the residence of the data subject.
N.Y. Comp. Codes R. & Regs. Tit. 8 § 315.4