N.Y. Comp. Codes R. & Regs. tit. 9, § 166-3.11
(b) Within seven business days of the receipt of an appeal concerning denial of access, or within 30 business days of the receipt of an appeal concerning denial of correction or amendment, the general counsel to the division or his designee shall either:
(1) provide access to, or correct or amend, the record and notify the data subject that, upon request, the correction or amendment shall be provided to any or all persons or governmental units to which the record or personal information has been disclosed; or
(2)