(a) Within 30 business days of a written request from a data subject for correction or amendment of a record or personal information that is reasonably described and that pertains to the data subject, the commission shall:

1. (1) make the amendment or correction in whole or in part and inform the data subject that, on his or her request, such correction or amendment will be provided to any person or governmental unit to which the record or personal information has been or is disclosed pursuant to paragraph (d), (i) or (l) of subdivision 1 of section 96 of the Public Officers Law;
2. (2) inform the data subject in writing of its refusal to correct or amend the record, including the reasons therefor.