New York regulations
Title 13 Part 121
Department of Law
Browse New York regulations by title, part, and section.
12 sections
You’re browsing Title 13 — free.
Read the source-transparency report →Create a free account (no card) to open all 23 titles →Compiled text through Jan 15, 2026Register checked through July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
All 12 displayed sections in this Part carry the same compiled date. Status and warnings stay on each section.
13 NYCRR 121.1 - Purpose and scope
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Source receipt
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- Jun 6, 2026
(a)It is the responsibility and the intent of the Department of Law (hereinafter department) to fully comply with the provisions of article 6-A of the Public Officers Law, the Personal Privacy Protection Law.
(b)The department shall maintain in its records only such personal information that is relevant and necessary to accomplish a purpose of the department authorized by law.
(c)Personal information will be collected, whenever practicable, directly from the person to whom the information pertains, except when collected for the purpose of making quasi-judicial determinations.
(d)The department seeks to ensure that all records pertaining to or used with respect to individuals are accurate, relevant, timely and complete.
(e)These regulations provide information regarding the procedures by which members of the public may assert rights granted by the Personal Privacy Protection Law.
13 NYCRR 121.2 - Designation of privacy compliance officer
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Westlaw Inline Boundary Correction
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Latest notice
- LAW-18-20-00002-A · Adopted rule · Jul 7, 2021
- Source snapshot
- Jun 6, 2026
(a)The department's privacy compliance officer is responsible for ensuring compliance with the provisions of the Personal Privacy Protection Law and the regulations herein and for coordinating department's response to requests for records or amendments of records. Responsibility for compliance by all special investigation units and the Statewide Organized Crime Task Force established pursuant to statute shall rest with the deputy attorney general in charge of the investigation unit or the deputy attorney general in charge of the Organized Crime Task Force.
(b)[Reserved]
(c)The privacy compliance officer is responsible for:
(1)assisting a data subject in identifying and requesting personal information, if necessary;
(2)describing the contents of systems of records orally or in writing in order to enable a data subject to learn if a system of records includes a record or personal information identifiable to a data subject requesting such record or personal information;
(3)taking one of the following actions upon locating the record sought:
(i)make the record available for inspection, in a printed form without codes or symbols, unless an accompanying document explaining such codes or symbols is also provided;
(ii)permit the data subject to copy the record; or
(iii)deny access to the record in whole or in part and explain in writing the reasons therefor;
(4)making a copy available, upon request, upon payment of or offer to pay established fees, if any, or permitting the data subject to copy the records;
(5)upon request, certifying that a copy of a record is a true copy; or
(6)certifying, upon request, that:
(i)the department does not have possession of the record sought;
(ii)the department cannot locate the record sought after having made a diligent search; or
(iii)the information sought cannot be retreived by use of the description thereof, or by use of the name or other identifier of the data subject without extraordinary search methods being employed by the department.
13 NYCRR 121.3 - Proof of identity
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Source receipt
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- Jun 6, 2026
(a)When a request is made in person, or when records are made available in person following a request by mail, the department may require appropriate identification, such as a driver's license, an identifier assigned to the data subject by the department, a photograph or similar information that confirms that the record sought pertains to the data subject.
(b)When a request is made by mail, the department may require verification of a signature or inclusion of an identifier generally known only by a data subject, or similar appropriate identification.
(c)Proof of identity shall not be required regarding a request for a record accessible to the public pursuant to article 6 of the Public Officers Law.
13 NYCRR 121.4 - Location
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Phase2b Dequote Reversal
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- May 19, 2026
(a)Records shall be made available at the offices of the agency. Requests for information and records may be directed to the department's offices which are currently at the following locations:
Albany:
State of New York
Department of Law
Administration Bureau
Justice Building
Empire State Plaza
Albany, NY 12223
New York City: State of New York Department of Law Administration Office 28 Liberty Street New York, NY 10005 Binghamton: State of New York Department of Law Key Bank Building 59-61 Court Street, 7th Floor Binghamton, NY 13901 Buffalo: State of New York Department of Law 65 Court Street, 3rd Floor Buffalo, NY 14202 Hauppauge: State of New York Department of Law Suffolk State Office Building Veterans Highway Hauppauge, NY 11787 Mineola: State of New York Department of Law Nassau Regional Office 190 Willis Avenue Mineola, NY 11501 Plattsburgh: State of New York Department of Law 70 Clinton Street Plattsburgh, NY 12901 Poughkeepsie: State of New York Department of Law 235 Main Street Poughkeepsie, NY 12601 Rochester: State of New York Department of Law Reynolds Arcade Building, Suite 900 16 Main Street East Rochester, NY 14614 Syracuse: State of New York Department of Law 333 East Washington Street Syracuse, NY 13202 Utica:
State of New York
Department of Law
Utica State Office Building
207 Genesee Street
Box 528
Utica, NY 13501
13 NYCRR 121.5 - Hours and places for public inspection and copying
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Source receipt
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- Jun 6, 2026
Records shall be available for inspection and copying by members of the public on each and every day that the offices of the department are open for the transaction of business, during all regular business hours. Records shall be inspected at the location for the inspection of records designated by the department.
13 NYCRR 121.6 - Requests for records
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Source receipt
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- Jun 6, 2026
(a)All requests shall be made in writing, except that the department, in its discretion, may make records available upon an oral request made in person after the applicant has demonstrated proof of identity, if proof of identity is required.
(b)A request shall reasonably describe the record sought. To the extent possible, the data subject shall supply identifying information that assists the agency in locating the record sought.
(c)Requests based upon categories of information described in a notice of a system of records or a privacy impact statement shall be deemed to reasonably describe the record sought.
(d)Within five business days of the receipt of a request, the department shall provide access to the record, deny access in writing explaining the reasons therefor, or acknowledge the receipt of the request in writing, stating the approximate date when the request will be granted or denied, which date shall not exceed 30 days from the date of the acknowledgment.
13 NYCRR 121.7 - Amendment of records
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Source receipt
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- Jun 6, 2026
Within 30 business days of a request from a data subject for correction or amendment of a record or personal information that is reasonably described and that pertains to the data subject, the department shall:
(a)make the amendment or correction in whole or in part and inform the data subject that, on request, such correction or amendment will be provided to any person or governmental unit to which the record or personal information has been or is disclosed pursuant to paragraph (d), (i) or (l) of subdivision 1 of section 96 of the Public Officers Law; or
(b)inform the data subject in writing of its refusal to correct or amend the record, including the reasons therefor.
13 NYCRR 121.8 - Denial of request for a record or amendment or correction of a record or personal information
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Source receipt
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- Jun 6, 2026
(a)Denial of a request for records or amendment or correction of a record or personal information shall:
(1)be in writing, explaining the reasons therefor; and
(2)identify the person to whom an appeal may be directed.
(b)A failure to grant or deny access to records within five business days of the receipt of a request or within 30 days of an acknowledgment of the receipt of a request, or a failure to respond to a request for amendment or correction of a record within 30 business days of receipt of such a request, shall be construed as a denial that may be appealed.
(c)Any such denial may be appealed to: FOIL Appeals Officer, State of New York, Office of the Attorney General, Division of Appeals and Opinions, The Capitol, Albany, NY 12224.
13 NYCRR 121.9 - Appeal
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Source receipt
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- Jun 6, 2026
(a)Any person denied access to a record or denied a request to amend or correct a record or personal information pursuant to section 121.8 of this Part may, within 30 business days of such denial, appeal to FOIL Appeals Officer, State of New York, Office of the Attorney General, Division of Appeals and Opinions, The Capitol, Albany, NY 12224.
(b)The time for deciding an appeal shall commence upon receipt of an appeal that identifies:
(1)the date and location of a request for a record or amendment or correction of a record or personal information;
(2)the record that is the subject of the appeal; and
(3)the name and return address of the appellant.
(c)Within seven business days of an appeal of a denial of access, or within 30 business days of an appeal concerning a denial of a request for correction or amendment, the person determining such appeals shall:
(1)provide access to or correct or amend the record or personal information; or
(2)fully explain in writing the factual and statutory reasons for further denial and inform the data subject of the right to seek judicial review of such determination pursuant to article 78 of the Civil Practice Law and Rules.
(d)If, on appeal, a record or personal information is corrected or amended, the data subject shall be informed that, on request, the correction or amendment will be provided to any person or governmental unit to which the record or personal information has been or is disclosed pursuant to paragraph (d), (i) or (l) of subdivision 1 of section 96 of the Public Officers Law.
(e)The department shall immediately forward to the Committee on Open Government a copy of any appeal made pursuant to this Part upon receipt, the determination thereof and the reasons therefor at the time of such determination.
13 NYCRR 121.10 - Statement of disagreement by data subject
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Source receipt
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- Jun 6, 2026
(a)If correction or amendment of a record or personal information is denied in whole or in part upon appeal, the determination rendered pursuant to the appeal shall inform the data subject of the right to:
(1)file with the department a statement of reasonable length setting forth the data subject's reasons for disagreement with the determination;
(2)request that such a statement of disagreement be provided to any person or governmental unit to which the record has been or is disclosed pursuant to paragraph (d), (i) or (l) of subdivision 1 of section 96 of the Public Officers Law.
(b)Upon receipt of a statement of disagreement by a data subject, the department shall:
(1)clearly note any portions of the record that are disputed; and
(2)attach the data subject's statement of disagreement to a person or governmental unit in conjunction with a disclosure made pursuant to paragraph (d), (i) or (l) of subdivision 1 of section 96 of the Public Officers Law; the department may also include a concise statement of its reasons for not making the requested amendment or correction.
13 NYCRR 121.11 - Fees
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Source receipt
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- Jun 6, 2026
(a)Unless otherwise prescribed by statute, there shall be no fee charged for:
(1)inspection of records;
(2)search for records; or
(3)any certification pursuant to this Part.
(b)Unless otherwise prescribed by statute, copies of records shall be provided upon payment of fees as set forth in section 120.20 of this Title.
13 NYCRR 121.12 - Severability
No later Register activity identified in this check.
Dates and status
- Compiling agency
- Department of Law
- Text status
- Source receipt
- Compiled text through
- Jan 15, 2026
- Register checked through
- July 29, 2026/Vol. XLVIII, Issue 30 (2026-07-29)
- Activity status
- No later Register activity identified in this check.
- Source snapshot
- Jun 6, 2026
If any provision of this Part or the application thereof to any person or circumstance is adjudged invalid by a court of competent jurisdiction, such judgment shall not affect or impair the validity of the other provisions of this Part or the application thereof to other persons and circumstances.