N.Y. Comp. Codes R. & Regs. tit. 9, § 5401.3 – Amendment of records.

(a) Within 30 business days of a request from a data subject for correction or amendment of a record or personal information that is reasonably described and that pertains to the data subject, the commission shall:
1. (1) make the amendment or correction in whole or in part and inform the data subject that, on request, such correction or amendment will be provided to any person or governmental unit to which the record or personal information has been or is disclosed pursuant to paragraph (d), (i) or (l) of subdivision 1 of section 96 of the Public Officers Law; or
2. (2) inform the data subject in writing of its refusal to correct or amend the record, including the reasons therefor.
(b) Denial of a request for records or amendment or correction of a record or personal information:
1. (1) shall be in writing, explaining the reasons therefor; and
2. (2) identifying the person to whom an appeal may be directed.
(c) A failure to grant or deny access to records within five business days of the receipt of a request, or within 30 days of an acknowledgment of the receipt of a request, or a failure to respond to a request for amendment or correction of a record within 30 business days of receipt of such a request, shall be construed as a denial that may be appealed.
(d) Any such denial may be appealed to:
Privacy Compliance Law Appeals Officer
c/o Counsel
New York State Gaming Commission
One Broadway Center
Schenectady, NY 12305