N.Y. Comp. Codes R. & Regs. tit. 9, § 462.1
(3) A request shall reasonably describe the record or records sought. Whenever possible, the data subject should supply identifying information that will assist in locating the records sought.
(b) Proof of identity.
(2) When a request is made in person, or when records are made available in person following a request made by mail, the agency may require appropriate identification.
(c) Location.
Records shall be made available at the agency's central office. However, the agency shall arrange for records to be made available at the regional headquarters nearest the residence of the data subject whenever possible.
(d) Hours.
The agency shall accept requests for records and make records available during all regular business hours.
(e) Processing the request.
In processing the request, the records access officer shall:
(3) within five days of the receipt of a written request, either:
(iv) if an acknowledgment was given to the data subject according to this paragraph, grant or deny access to the record within 30 days.
(f) Making the record available.
In making a record available, the agency shall:
(a) Form for request.