4. (a) Except as provided in subdivision five of this section, any person denied access to a record may within thirty days appeal in writing such denial to the head, chief executive or governing body of the entity, or the person therefor designated by such head, chief executive, or governing body, who shall within ten business days of the receipt of such appeal fully explain in writing to the person requesting the record the reasons for further denial, or provide access to the record sought. In addition, each agency shall immediately forward to the committee on open government a copy of such appeal when received by the agency and the ensuing determination thereon. Failure by an agency to conform to the provisions of subdivision three of this section shall constitute a denial.
(b) Except as provided in subdivision five of this section, a person denied access to a record in an appeal determination under the provisions of paragraph (a) of this subdivision may bring a proceeding for review of such denial pursuant to article seventy-eight of the civil practice law and rules. In the event that access to any record is denied pursuant to the provisions of subdivision two of section eighty-seven of this article, the agency involved shall have the burden of proving that such record falls within the provisions of such subdivision two. Failure by an agency to conform to the provisions of paragraph (a) of this subdivision shall constitute a denial.
(c) The court in such a proceeding may assess, against such agency involved, reasonable attorney's fees and other litigation costs reasonably incurred by such person in any case under the provisions of this section in which such person has substantially prevailed, when:
i. the agency had no reasonable basis for denying access; or
ii. the agency failed to respond to a request or appeal within the statutory time.
5. (a) (1) A person acting pursuant to law or regulation who, subsequent to the effective date of this subdivision, submits any information to any state agency may, at the time of submission, request that the agency except such information from disclosure under paragraph (d) of subdivision two of section eighty-seven of this article. Where the request itself contains information which if disclosed would defeat the purpose for which the exception is sought, such information shall also be excepted from disclosure.
(1-a) A person or entity who submits or otherwise makes available any records to any agency, may, at any time, identify those records or portions thereof that may contain critical infrastructure information, and request that the agency that maintains such records except such information from disclosure under subdivision two of section eighty-seven of this article. Where the request itself contains information which if disclosed would defeat the purpose for which the exception is sought, such information shall also be excepted from disclosure.
(2) The request for an exception shall be in writing and state the reasons why the information should be excepted from disclosure.
(3) Information submitted as provided in subparagraphs one and one-a of this paragraph shall be excepted from disclosure and be maintained apart by the agency from all other records until fifteen days after the entitlement to such exception has been finally determined or such further time as ordered by a court of competent jurisdiction.
(b) On the initiative of the agency at any time, or upon the request of any person for a record excepted from disclosure pursuant to this subdivision, the agency shall:
(1) inform the person who requested the exception of the agency's intention to determine whether such exception should be granted or continued;
(2) permit the person who requested the exception, within ten business days of receipt of notification from the agency, to submit a written statement of the necessity for the granting or continuation of such exception;
(3) within seven business days of receipt of such written statement, or within seven business days of the expiration of the period prescribed for submission of such statement, issue a written determination granting, continuing or terminating such exception and stating the reasons therefor; copies of such determination shall be served upon the person, if any, requesting the record, the person who requested the exception, and the committee on open government.
(c) A denial of an exception from disclosure under paragraph (b) of this subdivision may be appealed by the person submitting the information and a denial of access to the record may be appealed by the person requesting the record in accordance with this subdivision.
(1) Within seven business days of receipt of written notice denying the request, the person may file a written appeal from the determination of the agency with the head of the agency, the chief executive officer or governing body or their designated representatives.
(2) The appeal shall be determined within ten business days of the receipt of the appeal. Written notice of the determination shall be served upon the person, if any, requesting the record, the person who requested the exception and the committee on public access to records. The notice shall contain a statement of the reasons for the determination.
(d) A proceeding to review an adverse determination pursuant to paragraph (c) of this subdivision may be commenced pursuant to article seventy-eight of the civil practice law and rules. Such proceeding, when brought by a person seeking an exception from disclosure pursuant to this subdivision, must be commenced within fifteen days of the service of the written notice containing the adverse determination provided for in subparagraph two of paragraph (c) of this subdivision.
(e) The person requesting an exception from disclosure pursuant to this subdivision shall in all proceedings have the burden of proving entitlement to the exception.
(f) Where the agency denies access to a record pursuant to paragraph (d) of subdivision two of section eighty-seven of this article, the agency shall have the burden of proving that the record falls within the provisions of such exception.
(g) Nothing in this subdivision shall be construed to deny any person access, pursuant to the remaining provisions of this article, to any record or part excepted from disclosure upon the express written consent of the person who had requested the exception.
(h) As used in this subdivision the term "agency" or "state agency" means only a state department, board, bureau, division, council or office and any public corporation the majority of whose members are appointed by the governor.