N.Y. Comp. Codes R. & Regs. tit. 14, § 520.1 – Background and intent.

(a) It is the responsibility and the intent of the Office of Mental Health (OMH) to fully comply with the provisions of article 6-A of the Public Officers Law, the Personal Privacy Protection Law.
(b) OMH shall maintain in its records only such personal information that is relevant and necessary to accomplish the purpose of the agency.
(c) Personal information will be collected, whenever practicable, directly from the person to whom the information pertains, except when collected about a person receiving services at a facility or when collected for the following purposes:
1. (1) making quasi-judicial determination;
2. (2) determining whether to issue, deny, revoke, suspend, limit, amend or renew an operating certificate; or
3. (3) determining whether to take administrative or criminal action to restrain or prosecute violations of law.
(d) OMH shall seek to ensure that all records pertaining to or used with respect to individuals are accurate, relevant, timely and complete.
(e) This Part provides information regarding the procedures by which members of the public may exercise rights granted by the Personal Privacy Protection Law.