N.Y. Comp. Codes R. & Regs. tit. 21, § 2053.9
(a) Within 30 business days of receipt of a written request from a data subject for correction or amendment of a record or personal information, reasonably described, pertaining to that data subject, which he or she believes is not accurate, relevant, timely, or complete, the corporation shall: