N.Y. Comp. Codes R. & Regs. tit. 9 § 2657.6

Current through Register Vol. 46, No. 53, December 31, 2024

Section 2657.6 - Requests for access to records

(a) All requests shall be made in writing. Requests may be submitted by electronic mail.

(b) Requests shall reasonably describe the record sought. To the extent possible, the requestor shall supply identifying information that assists the division in locating the record sought. In the absence of such identification, the division may seek clarification from the requestor, in order for the request to be considered.

(c) Requests based upon categories of information described in a notice of a system of records or a privacy impact statement shall be deemed to reasonably describe the record sought.

(d) Within five business days of the receipt of a request, the privacy compliance officer shall provide access to the record, deny access in writing explaining the reasons therefor, or acknowledge the receipt of the request in writing, stating the approximate date when the request will be granted or denied, which shall not exceed 30 days from the date of the acknowledgment.

(e) The privacy compliance officer shall respond by electronic mail to requests submitted by such mail, to the extent practicable, unless a response in some other form is requested, and shall respond to all other written requests by electronic mail, if possible, upon request.

N.Y. Comp. Codes R. & Regs. Tit. 9 § 2657.6