N.Y. Comp. Codes R. & Regs. tit. 14, § 85.9
(2) Each case record shall include:
(4) Patient records shall be safeguarded for confidentiality and be accessible only to authorized persons.
(b) Statistical records and reports.
(1) Such statistical information shall be prepared and maintained as may be necessary for optimally effective operation of the facility and as may be required by the department.
(2)
(a) Case records.