N.Y. Comp. Codes R. & Regs. tit. 21, § 501.5
(d) If access to records is neither granted nor denied within five business days following the receipt of a request, the authority shall acknowledge the receipt of the request in writing and include a written statement of the approximate date when such request will be granted or denied, in which case, if access to records is neither granted or denied within 10 business after the time set forth in such statement, the request may be considered as denied. The authority may extend the time for providing access to records beyond five business days of the receipt of a request when it is necessary to: