N.Y. Comp. Codes R. & Regs. tit. 14, § 580.9
(2) Each case record shall include:
(b) Patient records shall be safeguarded for confidentiality and accessible only to authorized persons, and shall be otherwise maintained in accordance with applicable State and Federal laws and regulations governing the privacy of individually identifying health information.
(c) Statistical records and reports.
(a) Case records.