N.Y. Comp. Codes R. & Regs. tit. 11, § 226.5
(a) An insurer shall:
(2) report to the superintendent through a lost policy finder:
(3) within 30 days of receiving the request, or within 45 days of receiving the request where the insurer contracts with another entity to maintain the insurer’s records, for each identified policy and account insuring the life of, or owned by, the named decedent, provide to:
(ii) a requestor who is not the beneficiary of record on the identified policy or account the requested information to the extent permissible to be disclosed in accordance with Part 420 (Insurance Regulation 169) of this Title and any other applicable privacy law, and to take such other steps necessary to facilitate the payment of any benefit that may be due under the identified policy or account.
(b)