N.Y. Comp. Codes R. & Regs. tit. 11, § 420.20
A licensee shall not unfairly discriminate against a consumer or customer because that consumer or customer has not granted authorization for the disclosure of his or her nonpublic personal health information pursuant to the provisions of this Part.