N.Y. Comp. Codes R. & Regs. tit. 9, § 551.8 – Amendment of records.

(a) All requests made pursuant to this Part to amend a record shall be made in writing, must be accompanied by a reasonable proof of identity, and must reasonably describe the record to be amended.
(b) Within 30 days of a request from a data subject for correction or amendment of a record or personal information that is reasonably described and that pertains to the data subject, the Office of Information Technology Services shall:
1. (1) make the amendment or correction in whole or in part and inform the data subject that, upon request, such correction or amendment will be provided to any person or governmental unit to which the record or personal information has been or is disclosed pursuant to paragraph (d), (i) or (1) of subdivision one of section 96 of the Public Officers Law; or
2. (2) inform the data subject in writing of its refusal to correct or amend the record, including the reasons therefore.