N.Y. Comp. Codes R. & Regs. tit. 21 § 505.8

Current through Register Vol. 46, No. 45, November 2, 2024

Section 505.8 - Amendment of records and personal information

(a) Within 30 business days of a request from the data subject for correction or amendment of a record or personal information that is reasonably described and that pertains to the data subject, the authority shall:

(1) make the amendment or correction in whole or in part and inform the data subject that, on request, such correction or amendment will be provided to any person or governmental unit to which the record or personal information has been or is disclosed; or

(2)

(i) inform the data subject in writing of the denial of the request to correct or amend the record or personal information, including the reasons therefor; and

(ii) notify the data subject that an appeal of the decision may be made to the president and chief executive officer of the authority at the address set forth in section 505.3(b) of this Part.

(b) A failure to grant or deny access to records or personal information within five business days of the receipt of a request or within 30 days of an acknowledgment of the receipt of a request, or a failure to respond to a request for amendment or correction of a record or personal information within 30 business days of receipt of such a request, shall be construed as a denial that may be appealed.

N.Y. Comp. Codes R. & Regs. Tit. 21 § 505.8