This Part sets forth the procedures governing requests made by data subjects, as defined herein, to the department pursuant to Public Officers Law, article 6-A, known as the Personal Privacy Protection Law for access to department records pertaining to said data subjects and the procedures governing the retention and timely disposal of records pursuant to said article. This Part is promulgated pursuant to subdivision 2 of section 94 of the Public Officers Law and paragraph (i) of subdivision 1 of said section, which requires each agency maintaining a system of records to promulgate rules setting forth such procedures.