N.Y. Comp. Codes R. & Regs. tit. 14, § 510.9
(b) A request for a record may be denied for any of the following reasons:
(2) the record, if disclosed, would constitute an unwarranted invasion of personal privacy, under the provisions of Public Officers Law section 89(2) including, but not limited to:
(5) the record was compiled for law enforcement purposes and disclosure would:
(c) Disclosure of a record generally shall not be construed to constitute an unwarranted invasion of personal privacy pursuant to paragraph (b)(2) of this section when:
(d) Nothing in this Part shall require the disclosure of: