(a) It is the responsibility and the intent of the authority to fully comply with the provisions of article 6-A of the Public Officers Law (POL), the “Personal Privacy Protection Law.”

(b) The authority shall maintain in its records only such personal information that is relevant and necessary to accomplish a purpose of the authority that is required to be accomplished by statute or executive order or to implement a program specifically authorized by law.

(c) Personal information will be collected, whenever practicable, directly from the person to whom the information pertains.

(d) The authority seeks to ensure that all records pertaining to or used with respect to individuals are accurate, relevant, timely, and complete.

(e) These regulations provide information regarding the procedures by which members of the public may assert their rights as granted by the Personal Privacy Protection Law.