1. (a) Applications shall be made on printed forms prescribed by the board and submitted either personally or by mail to the New York State Gaming Commission, One Broadway Center, Schenectady, NY 12305, Attention: Privacy Compliance Officer.

2. (b) The person to whom such requests shall be made, and from whom such records or copies thereof may be obtained and certified, shall be the individual(s) designated by the executive director as the commission’s Privacy Compliance Officer(s). The duties of the Privacy Compliance Officer shall be:

   1. (1) assisting data subject in identifying and requesting personal information, if necessary;
   2. (2) describing the contents of systems records orally or in writing in order to enable a data subject to learn if a system of records includes a record or personal information identifiable to a data subject requesting such record or personal information;

   3. (3) taking one of the following actions upon locating the record sought:

      1. (i) make the record available for inspection, in a printed form without codes or symbols, unless an accompanying document explaining such codes or symbols is also provided;
      2. (ii) deny access to the record in whole or in part and explain in writing the reasons therefor;

      3. (iii) make a copy available, upon request, upon payment of established fees, if any, or permitting the data subject to copy the records; and

         (4)

      4. (i) upon request, certifying that copy of the record is a true copy; or

      5. (ii) certifying, upon request, that:

         1. (a) the commission does not have possession of the record sought;
         2. (b) the commission cannot locate the record sought after having made a diligent search; or
         3. (c) the information sought cannot be retrieved by use of the description thereof, or by use of the name or other identifier of the data subject without extraordinary search methods being employed by the commission.
3. (c) Records shall be made available at the main office of the commission, which is located at One Broadway Center, Schenectady, NY 12305.

4. (d) The commission shall accept requests for records and produce records during the hours of 10 a.m. to 4 p.m. on each business day.

   1. (1) When a request is made in person, or when records are made available in person following a request made by mail, the commission may require appropriate identification, such as driver's license, an identifier assigned to the data subject by the commission, a photograph or similar information that confirms that the record sought pertains to the data subject.
   2. (2) When a request is made by mail, the commission may require verification of a signature or inclusion of an identifier generally known only by a data subject, or similar appropriate identification.
   3. (3) Proof of identity shall not be required regarding a request for a record accessible to the public pursuant to article 6 of the Public Officers Law.

   (e) Proof of identity.

In accordance with article 6-A of the Public Officers Law, the Personal Privacy Protection Law, the following procedures are prescribed by which members of the public may assert rights granted by the Personal Privacy Protection Law: