1. (a) A request for the correction or amendment of a record shall be made in writing and shall identify or reasonably describe such record. Such a request may be submitted by electronic mail to an email address designated by the board, and posted on the agency’s website. All responsive communications to such a request, when submitted by electronic mail, shall also be in electronic mail, provided that the request does not seek a response in another form.

2. (b) The privacy compliance officer shall within 30 business days after receipt of a request:

   1. (1) make requested correction or amendment in whole or part and advise the individual that upon request, parties to whom such data has been disclosed in accordance with section 94.3(c) of the Public Officers Law, will be advised of such correction or amendment;

   2. (2) deny the request in writing. Such denial shall:

      1. (i) explain the reason for the denial;
      2. (ii) set forth the right of appeal to the privacy compliance appeals officer; and
      3. (iii) provide the name, title, business address and telephone number of the privacy compliance appeals officer.

The correction or amendment of records shall be subject to the following process: