N.Y. Public Health Law § 2899-Q
* § 2899-q. Reporting. 1. The commissioner shall annually review a sample of the records maintained under sections twenty-eight hundred ninety-nine-j and twenty-eight hundred ninety-nine-p of this article. The commissioner shall adopt regulations establishing reporting requirements for physicians taking action under this article to determine utilization and compliance with this article. The information collected under this subdivision shall not constitute a public record available for public inspection and shall be confidential and collected and maintained in a manner that protects the privacy of the patient, the patient's family, and any health care provider acting in connection with such patient under this article, except that such information may be disclosed to a governmental agency as authorized or required by law relating to professional discipline, protection of public health or law enforcement.