Current through Register Vol. 46, No. 12, March 20, 2024
(a) The administrative officer of the council
is hereby designated privacy compliance officer, and is responsible for
ensuring that the agency complies with the provisions of the Personal Privacy
Protection Law and the regulations in this Part, and for coordinating the
agency's response to requests for records or amendment of records.
(b) The address and telephone number of the
privacy compliance officer is: 80 Centre Street, New York, NY 10013, (212)
587-4579.
(c) Deputy privacy
compliance officers, their names and/or titles, addresses and telephone numbers
are hereby designated as follows: Personnel Clerk, New York State Council on
the Arts, 80 Centre Street, New York, NY 10013, (212) 587-4579.
(d) The privacy compliance officer and/or his
deputies are responsible for:
(1) assisting a
data subject in identifying and requesting personal information, if
necessary;
(2) describing the
contents of systems of records orally or in writing in order to enable a data
subject to learn if a system of records includes a record or personal
information identifiable to a data subject requesting such record or personal
information;
(3) taking one of the
following actions upon locating the record sought:
(i) make the record available for inspection,
in a printed form without codes or symbols, unless an accompanying document
explaining such codes or symbols is also provided;
(ii) permit the data subject to copy the
record; or
(iii) deny access to the
record in whole or in part, and explain in writing the reasons
therefor;
(4) making a
copy available, upon request, upon payment of or offer to pay established fees,
if any, or permitting the data subject to copy the records;
(5) upon request, certifying that a copy of a
record is a true copy; and
(6)
certifying, upon request, that:
(i) the
council does not have possession of the record sought;
(ii) the council cannot locate the record
sought after having made a diligent search; or
(iii) the information sought cannot be
retrieved by use of the description thereof, or by use of the name or other
identifier of the data subject without extraordinary search methods being
employed by the council.
