N.Y. Comp. Codes R. & Regs. tit. 14, § 512.17
(c) If, based on a review of the program and practices of a provider of service, the office determines that a provider of service is not exercising due diligence in complying with the requirements of this Part, the office shall give notice of the deficiency to the provider of service and may also initiate the following: