N.Y. Comp. Codes R. & Regs. tit. 11, § 420.9
(1) Examples of reasonable expectation of actual notice. A licensee may reasonably expect that a consumer will receive actual notice if the licensee:
(2) Examples of unreasonable expectation of actual notice. A licensee may not, however, reasonably expect that a consumer will receive actual notice of the licensee's privacy policies and practices if the licensee:
(ii) sends the notice via electronic mail to a consumer who does not obtain an insurance product or service from the licensee electronically.
(c) Annual notices only.
A licensee may also reasonably expect that a customer will receive actual notice of the licensee's annual privacy notice if:
(2) the customer has requested that the licensee refrain from sending any information regarding the customer relationship, and the licensee's current privacy notice remains available to the customer upon request.
(d) Oral description of notice insufficient.
A licensee may not provide any notice required by this Part solely by orally explaining the notice, either in person or over the telephone.
(e) Retention or accessibility of notices for customers.
(2) Examples of retention or accessibility. The licensee provides a privacy notice to the customer so that the customer can retain it or obtain it later if the licensee:
(iii) makes the licensee's current privacy notice available on a web site (or a link to another web site) for the customer who obtains an insurance product or service electronically and agrees to receive the notice at the web site.
(f) Joint notice with other financial institutions.
A licensee may provide a joint notice from the licensee and one or more of the licensee's affiliates or other financial institutions, as identified in the notice, as long as the notice is accurate with respect to both the licensee and the other institutions. A licensee may also provide a notice on behalf of another financial institution.
(g) Treatment of invalid addresses.
A licensee is not required to provide initial, annual and revised notices to a consumer or a customer if the consumer's or the customer's last known address, according to the licensee's records, is deemed invalid. An address of record is deemed invalid if mail sent to that address has been returned by the postal authorities as undeliverable and if subsequent reasonable attempts to obtain a current valid address for the consumer or the customer have been unsuccessful.
(h) Joint relationships.
If two or more consumers jointly obtain an insurance product or service from a licensee, the licensee may satisfy the initial, annual and revised notice requirements of sections 420.4(a), 420.5(a) and 420.8(a) of this Part, respectively, by providing one notice to those consumers jointly.
(a) How to provide notices.
A licensee shall provide any notices that this Part requires so that each consumer can reasonably be expected to receive actual notice in writing or, if the consumer agrees, electronically. A licensee may provide any and all privacy and opt out notices, including short-form initial notices through an affiliate or agent, but remains responsible for compliance with this Part.
(b)