N.Y. Comp. Codes R. & Regs. tit. 12, § 703.7 – Amendment of records.

(a) Within 30 business days of a request from a data subject for correction or amendment of a record or personal information that is reasonably described and that pertains to the data subject, the department shall:
1. (1) make the amendment or correction in whole or in part and inform the data subject that, on request, such correction or amendment will be provided to any person or governmental unit to which the record or personal information has been or is disclosed; or
2. (2) inform the data subject in writing of the denial of the request to correct or amend the record, including the reasons therefor and the name of the person to whom an appeal may be directed.
(b) A failure to grant or deny access to records within five business days of the receipt of a request or within 30 days of an acknowledgment of the receipt of a request, or a failure to respond to a request for amendment or correction of a record within 30 business days of receipt of such a request, shall be construed as a denial that may be appealed.