(b) If the request is made by an authorized representative it must, in addition, be accompanied by an authorization which specifically describes:

1. (1) the personal information which the data subject wants disclosed;
2. (2) the person or entity to whom disclosure is authorized; and
3. (3) the situation specific use which will be made of such information by the person or entity receiving it.

(c) The records access officer shall, within five business days after receipt of a request:

1. (1) Make the requested record available.

2. (2) Deny the request in writing. Such denial shall:

   1. (i) explain the reason for the denial;
   2. (ii) set forth the right of appeal to the records access appeals officer; and
   3. (iii) provide the name, title, business address and telephone number of the records access appeals officer.

3. (3) Furnish written acknowledgment of the request which:

   1. (i) provides the approximate date when the request will be granted or denied (such date shall not exceed 30 days from the date of acknowledgment);
   2. (ii) advises the requester of the provisions of subdivision (d) of this section;
   3. (iii) sets forth the right of appeal to the records access appeals officer; and
   4. (iv) provides the name, title, business address and telephone number of the records access appeals officer.

(d) Failure to grant or deny access to records within five business days of the receipt of a request or within 30 days of an acknowledgment of a request may be construed as a denial subject to appeal. Such appeal shall not be initiated except upon expiration of:

1. (1) five business days for unacknowledged requests;
2. (2) the specified date, if one is provided in acknowledged requests; or
3. (3) thirty days for acknowledged requests when no date is provided.

(h) If requested, the records access officer shall:

1. (1) Upon payment of the appropriate fees, provide a copy of the record.
2. (2) Certify (see section 604.12 of this Part) that the copy is a true copy.
3. (3) Upon satisfactory verification of identity, process the request by mail.