New York Codes, Rules and Regulations
Title 21 - Miscellaneous
Chapter X - Power Authority Of The State Of New York
Part 462 - Personal Privacy Protection Law
Section 462.7 - Requests for records and personal information

(a) All requests shall be made in writing, except that the authority may make records or personal information available to a data subject who is an authority employee upon an oral request made in person after the employee has demonstrated proof of identity.

(b) A request shall reasonably describe the records and personal information sought. Whenever possible the data subject should supply identifying information that assists the Power Authority in locating the records or personal information sought.

(c) Within five business days of the receipt of a request, the Power Authority shall provide access to the record or personal information, deny access in writing explaining the reasons therefor or acknowledge the receipt of the request in writing, stating the approximate date when the request will be granted or denied, which date shall not exceed 30 days from the date of the acknowledgment.