If the corporation seeks to establish a new system of records subsequent to September 1, 1984, it shall file with the committee a privacy impact statement as prescribed by section 93(4) of the Public Officers Law. If the corporation seeks to modify a system of records in a way which would render inaccurate any information set forth in a privacy impact statement, or in the notice filed pursuant to chapter 677 of the Laws of 1980, it shall file with the committee a supplemental statement to conform the privacy impact statement or notice to the proposed modification. Unless such proposed system or modification is required by law to be instituted less than 30 business days from the date of the filing of the privacy impact statement or supplemental statement, no such proposed system or modification shall be instituted until the completion of the procedures for review by the committee set forth in section 93(3) of the Public Officers Law.
N.Y. Comp. Codes R. & Regs. Tit. 21 § 2053.15