N.Y. General Business Law § 380-J
(a) No consumer reporting agency shall report or maintain in the file on a consumer, information:
(b) Notwithstanding the provisions of paragraph one of subdivision (a) of this section, a consumer reporting agency may collect, evaluate, prepare, use or report information relative to a detention of an individual by a retail mercantile establishment, provided that:
(f)