(a) All requests made pursuant to this Part shall be made in writing and must be accompanied by a reasonable proof of identity.

(b) A request shall reasonably describe the record to which access is sought or about which information is desired. Whenever possible, the data subject should supply identifying information that assists the Office of Information Technology Services in locating the records sought.

(c) Requests based upon categories of information described in a notice of a system of records or a privacy impact statement shall be deemed to meet the required description of the record sought.

(d) Within five business days of the receipt of a proper request, the Office of Information Technology Services shall provide access to the record, deny access in writing explaining the reasons therefore, or acknowledge the receipt of a request in writing, stating the approximate date when the request will be granted or denied, that date shall not exceed 30 days from the date of acknowledgment.