(b) The time for deciding an appeal shall commence upon receipt of an appeal that identifies:

1. (1) the request for a record or amendment or correction of a record or personal information which has been denied in whole or in part;
2. (2) the record that is the subject of the appeal; and
3. (3) the name and return address of the data subject or the person making the appeal.

(c) Within seven business days of an appeal of a denial of access, or within 30 days of an appeal concerning a denial of a request for correction or amendment, the privacy appeals officer shall:

1. (1) provide access to or correct or amend the record or personal information; or
2. (2) fully explain in writing the factual and statutory reasons for further denial and inform the data subject of the right to seek judicial review of such determination pursuant to article 78 of the Civil Practice Law and Rules.

(e) If correction or amendment of a record or personal information is denied in whole or in part upon appeal, the determination rendered pursuant to the appeal shall inform the data subject of the right to:

1. (1) file with this office a statement of reasonable length setting forth the data subject's reasons for disagreement with the determination; and
2. (2) request that such a statement of disagreement be provided to any person or governmental unit to which the record has been or is disclosed pursuant to paragraph (d), (i) or (l) of subdivision 1 of section 96 of the Public Officers Law.