(a) Any data subject whose request under section 365.4 or 365.5 of this Part is denied in whole or in part may, within 30 business days, appeal such denial in writing to the commissioner or the department's reviewing official at the department's main address. The commissioner or reviewing official shall, within seven business days of the receipt of an appeal concerning denial of access, or within 30 business days of the receipt of an appeal concerning denial of correction or amendment either:

(b) The department shall immediately forward a copy of such appeal, the determination thereof and the reasons therefor to the committee.

(c) If a correction or amendment of a record is denied in whole or in part upon appeal, the department shall inform the data subject of the right to file with the department a statement of reasonable length setting forth the reason for disagreement with the department's determination and that, upon request, his or her statement of a disagreement will be provided to any or all persons or governmental units to which the record has been or is disclosed, pursuant to paragraph (c) of subdivision 3 of section 94 of the Public Officers Law. With respect to any personal information about which a data subject has filed a statement of disagreement, the department shall clearly note any portions of the record which are disputed, and shall attach the data subject's statement of disagreement as part of the record. When providing the data subject's statement of disagreement to other persons or governmental units pursuant to paragraph (c) of subdivision 3 of section 94 of the Public Officers Law, the department may, if it deems appropriate, also include in the record a concise statement of the department's reasons for not making the requested statement.