Sec. 1552.2. Designation of privacy compliance officer

(a) The administrative director is hereby designated as the privacy compliance officer and is responsible for ensuring that the fund complies with the provisions of the Personal Privacy Protection Law and the regulations herein and for coordinating the fund's response to requests for records or amendment of records. In the event that there is a vacancy in the position of privacy compliance officer and/or the latter is absent from work for an extended period of time, the general manager of the fund shall designate another employee of the fund to act as the privacy compliance officer during the period of such vacancy or absence.

(b) The address and telephone number of the privacy compliance officer is: Administrative Director, State University Construction Fund, State University Plaza, P.O. Box 1946, Albany, NY 12201-1946, [phone].

(c) The privacy compliance officer is responsible for:

(1) assisting a data subject in identifying and requesting personal information, if necessary;

(2) describing the contents of systems of records orally or in writing in order to enable a data subject to learn if a system of records includes a record or personal information identifiable to a data subject requesting such record or personal information;

(3) taking one of the following actions upon locating the record sought:

(i) making the record available for inspection, in a printed form without codes or symbols, unless an accompanying document explaining such codes or symbols is also provided;

(ii) permitting the data subject to copy the record; or

(iii) denying access to the record in whole or in part and explaining in writing the reasons therefor.

(4) upon request for copies of records, making a copy available upon payment of 25 cents per page;

(5) upon request, certifying that a copy of a record is a true copy; or

(6) upon request, certifying that:

(i) the fund does not have possession of the record sought;

(ii) the fund cannot locate the record sought after having made a diligent search; or

(iii) the information sought cannot be retrieved by use of the description thereof, or by use of the name or other identifier of the data subject without extraordinary search methods being employed by the fund.