(a) All requests for records or amendment of records must be in writing (no oral requests will be accepted) and shall reasonably describe the record or records sought. Whenever possible, a person requesting records should supply information regarding dates, file designations or other information that may help to describe the records sought. The request should be addressed as follows: Privacy Compliance Officer, New York State Commission of Investigation, 270 Broadway, 26th Floor, New York, NY 10007 (212) 577-0700.

(b) A response to any request reasonably describing the record or records sought shall be given within five business days of receipt of the request.

(c) If the privacy compliance officer does not provide or deny access to the record sought within five business days of a request, a written acknowledgment of receipt of the request and a statement of the approximate date when the request will be granted or denied shall be furnished. If access to records is neither granted nor denied within 30 business days after the date of acknowledgment of receipt of a request, it shall be construed as a denial which may be appealed.

(d) Whenever a request is made pursuant to the Personal Privacy Protection Law, the commission may require identification that is appropriate and reasonable under the circumstances, including but not limited to a driver's license, an identifier assigned to the data subject by the commission or other law enforcement or public safety agency, a photograph, signature verification or such similar information that confirms that the record sought pertains to the data subject.