(a) Authority means the Niagara Frontier Transportation Authority and any subsidiary corporations.

(b) Committee means the Committee on Open Government as constituted pursuant to subdivision 1 of section 89 of the Public Officers Law.

(c) Data subject means any natural person about whom personal information has been collected by the authority.

(d) Disclose means to reveal, release, transfer, disseminate or otherwise communicate personal information or records orally, in writing or by electronic or any other means other than to the data subject.

(e) Personal information means any information concerning a data subject which, because of name, number, symbol, mark or other identifier, can be used to identify that data subject.

(f) Public safety agency record means a record of the authority's transit police department if such record pertains to investigation, law enforcement, confinement of persons in correctional facilities or supervision of person pursuant to criminal conviction or court order.

(g) Record means any item, collection or grouping of personal information about a data subject which is maintained and is retrievable by use of the name or other identifier of the data subject irrespective of the physical form or technology used to maintain such personal information. The term record shall not include personal information which is not used to make any determination about a data subject if it is:

(h) Routine use means, with respect to the disclosure of a record or personal information, any use of such record or personal information relevant to the purpose for which it was collected, and which use is necessary to the statutory duties of the authority, or necessary for the authority to operate a program specifically authorized by law.

(i) Subsidiary corporation means the Niagara Frontier Transit Metro System, Inc., and any subsidiary corporations which may be created at a later time.

(j) System of records means any group of records under the actual or constructive control of the authority pertaining to one or more data subjects from which personal information is retrievable by use of the name or other identifier of a data subject.