N.Y. Comp. Codes R. & Regs. tit. 5, § 2.9
(b) Within seven business days of the receipt of an appeal of a denial of access, or within 30 business days of an appeal of a denial of a request for correction or amendment, the deputy commissioner and counsel shall either:
(1) provide access to or correct or amend the record and notify the data subject that, upon request, the correction or amendment shall be provided to any or all persons or governmental units to which the record or personal information has been disclosed; or
(2)