N.Y. Comp. Codes R. & Regs. Tit. 9 §§ 145-2.3

Current through Register Vol. 46, No. 50, December 11, 2024

Section 145-2.3 - Requesting records

(a) All requests for personal records shall be made in writing to the deputy privacy compliance officer, except that the Division of the Budget may make records available upon an oral request made in person after the applicant has demonstrated proof of identity.

(b) A request shall reasonably describe the record sought. Whenever possible, the data subject should supply identifying information that assists the agency in locating the records sought.

(c) Requests based upon categories of information described in a notice of a system of records or a privacy impact statement shall be deemed to reasonably describe the record sought.

(d) Within five business days of the receipt of a request, the agency shall provide access to the record, deny access in writing explaining the reasons therefor, or acknowledge the receipt of the request in writing, stating the appropriate date when the request will be granted or denied, which date shall not exceed 30 days from the date of the acknowledgment.

N.Y. Comp. Codes R. & Regs. Tit. 9 §§ 145-2.3