N.Y. Comp. Codes R. & Regs. Tit. 21 § 701.2 - Designation of privacy compliance officer

(a) The chairman or chief counsel of the commission will designate either the executive, senior or other assistant counsel as the privacy compliance officer.

(b) The privacy compliance officer is responsble for insuring appropriate agency response to requests for records or amendment of records. All inquiries regarding requests for records or amendment of records under the Personal Privacy Protection Law should be directed to the privacy compliance officer.

(c) The privacy compliance officer is responsible for:

(1) assisting a data subject in identifying and requesting personal information, if necessary;

(2) describing the contents of systems of records in writing in order to enable a data subject to learn if a system of records includes a record or personal information identifiable to a data subject requesting such record or personal information;

(3) upon locating the record sought, taking one of the following actions:

(i) making the record available for inspection, in a printed form without codes or symbols, unless an accompanying document explaining such codes or symbols is also provided; or

(ii) denying access to the record in whole or in part and explaining in writing the reasons therefor;

(4) upon request for copies of available records, make a copy available, upon payment of established fees, if any;

(5) upon request, certify that a copy of a record is a true copy; or

(6) upon failure to locate a record, indicate that:

(i) the commission does not have possession of the record sought;

(ii) the commission cannot locate the record sought after having made a diligent search; or

(iii) the information sought cannot be retrieved by use of the description thereof, or by use of the name or other identifier of the data subject, without extraordinary search methods being employed by the commission.

Notes

N.Y. Comp. Codes R. & Regs. Tit. 21 § 701.2