17 CRR-NY 2.3NY-CRR
17 CRR-NY 2.3
17 CRR-NY 2.3
2.3 Personal privacy compliance officer.
(a) The records access officer is hereby designated the personal privacy compliance officer and is responsible for insuring that the department complies with the provisions of the Personal Privacy Protection Law and this Part.
(b) The personal privacy compliance officer shall:
(1) coordinate the department's response to requests for access or amendment, correction or disclosure of records as provided in this Part;
(2) maintain a current list of department records that contain personal information retrievable by use of a data subject's name or other identifier;
(3) assist data subjects seeking to determine if the department maintains records pertaining to them;
(4)
(i) make the records available for inspection in a form comprehensible to the data subject and permit the data subject to copy the records; or
(ii) deny access to the record, in whole or in part, and explain the reasons therefor in writing;
(5) upon request, certify that a copy of a record is a true copy; or
(6) upon request, certify that:
(i) the department does not have possession of the record sought;
(ii) the department cannot locate the record sought after having made a diligent search; or
(iii) the information sought cannot be retrieved by use of the description furnished to the department or by the use of the name or other identifier of the data subject without the use of extraordinary search methods by the department.
17 CRR-NY 2.3
Current through December 15, 2021
| End of Document |