(a) Any agency which seeks to establish a system of records subsequent to September 1, 1984 shall file with the committee a privacy impact statement.

(b) Any agency which seeks to modify a system of records in a way that would render inaccurate a privacy impact statement previously submitted to the committee, or a notice filed pursuant to chapter 677 of the Laws of 1980, shall file with the committee a supplemental statement to conform the privacy impact statement or notice to the proposed modification.

(c) Unless the date by which a proposed system of records or modification of an existing system of records is required by law to be instituted is less than 30 business days from the date of the filing of the privacy impact statement, no such system or modification shall be instituted until the completion of the procedures set forth in subdivision 3 of section 93 of the Public Officers Law.