New York Codes, Rules and Regulations
Title 21 - Miscellaneous
Chapter XXV - Committee On Open Government
Part 1402 - Privacy Impact Statement
Section 1402.4 - Contents of the privacy impact statement
Current through Register Vol. 46, No. 12, March 20, 2024
Pursuant to subdivision 4 of section 93 of the Public Officers Law, the privacy impact statement shall include the following:
(a) the name of the agency and the subdivision within the agency that will maintain the system of records, and the name or title of the system of records in which such information will be maintained;
(b) the title and business address of the official within the agency responsible for the system of records;
(c) where applicable, the procedures by which a data subject may gain access to personal information pertaining to such data subject in the system of records, and the procedures by which a data subject may seek to amend or correct its contents;
(d) the categories and the approximate number of persons on whom records will be maintained in the system of records;
(e) the categories of information which will be collected and maintained in the system of records;
(f) the purposes for which each category of information within the system of records will be collected and maintained;
(g) the disclosures of personal information within the system of records that the agency will regularly make for each category of information, and the authority for such disclosures;
(h) the general or specific statutory authority for the collection, maintenance and disclosure of each category of information within the system of records;
(i) policies governing retention and timely disposal of information within the system of records in accordance with law;
(j) each and every source for each category of information within the system of records;
(k) a statement indicating whether the system of records will be maintained manually, by automated data system, or both.
