N.Y. Comp. Codes R. & Regs. Tit. 5 § 2.11 - Disclosures

(a) For disclosures pursuant to section 96 of the Public Officers Law, the personal privacy compliance officer shall:

(1) keep an accurate accounting of the date, nature and purpose of each disclosure of a record or personal information, and the name and address of the person or governmental unit to whom the disclosure is made;

(2) retain such accounting made for at least five years after the disclosure for which the accounting is made, or for the life of the record disclosed, whichever is longer;

(3) at the request of the data subject, inform any person or other governmental unit to which a disclosure has been or is made of any correction, amendment or notation of dispute made by the department, provided that an accounting of the prior disclosure was made or that the data subject to whom the record pertains provides the name of such person or governmental unit; and

(4) with respect to disclosures made for inclusion in a public safety agency record or to a governmental unit or component thereof whose primary function is the enforcement of civil or criminal statutes, comply with the provisions of paragraphs (d) and (e) of subdivision 3 of section 94 of the Public Officers Law.

Notes

N.Y. Comp. Codes R. & Regs. Tit. 5 § 2.11