(a) A request for a record may be denied for any of the following reasons:

1. (1) The record is exempted from disclosure by other State or Federal statute. Examples of statutes which limit public access to records are:

   1. (i) section 33.13 of the Mental Hygiene Law, which restricts access to information about individuals (see section 603.13[b] of this Part), including identification of individuals and their clinical records;
   2. (ii) section 3101(d) of the Civil Practice Law and Rules, which restricts access to records prepared solely for purposes of litigation; and
   3. (iii) sections 1306 and 1395bb of title 42 of the United States Code, which restrict public access to hospital survey reports prepared by the Joint Commission on the Accreditation of Hospitals (JCAH).
2. (2) Disclosure of the record could impair present or imminent contract awards or collective bargaining negotiations.
3. (3) The record contains trade secrets or is maintained for the regulation of commercial enterprise, and the disclosure of such record could cause substantial injury to the competitive position of the subject enterprise.

4. (4) The record was complied for law enforcement purposes and disclosure could:

   1. (i) interfere with law enforcement investigations or judicial proceedings;
   2. (ii) deprive a person of his or her right to a fair trial or impartial adjudication;
   3. (iii) identify a confidential source or disclose confidential information relating to a criminal investigation; or
   4. (iv) reveal nonroutine criminal investigative techniques or procedures.
5. (5) Disclosure of the record could endanger the life or safety of any person. If the records access officer has a concern that such might be the case, he or she may require the requester to identify himself or herself and state the reason why the record is being requested.

6. (6) The record is interagency or intra-agency materials, but not:

   1. (i) a statistical tabulation (see section 603.13[g] of this Part) or factual tabulation (see section 603.13[c]) or data;
   2. (ii) instructions to staff which affect the public; or
   3. (iii) final agency policy or determination.
7. (7) Disclosure of the record would jeopardize an agency's capacity to guarantee the security of its information technology assets, such assets encompassing both electronic information systems and infrastructures.
8. (8) The record consists of examination questions or answers which are requested prior to final administration of such questions.
9. (9) The record of the type described by the requester does not exist.

(b) Nothing in this Part shall require disclosure of the name or home address of the following persons:

1. (1) applicants for appointment to public employment; or
2. (2) beneficiaries of a public employees' retirement system.

(c) Nothing in this Part shall require disclosure of the home address of the following persons, unless such disclosure is to recognized employee organizations pursuant to section 89.7 of the Public Officers Law:

1. (1) present or former officers or employees; or
2. (2) retirees of a public employees' retirement system.

(d) A request for a record must be denied if:

1. (1) Disclosure is prohibited under article 6-A of the Public Officers Law, known as the Personal Privacy Protection Law.

2. (2) Disclosure would constitute an unwarranted invasion of personal privacy.

   1. (i) An invasion of personal privacy includes, but is not limited to, any of the following:

      1. (a) disclosure of employment, medical or credit histories or personal references of applicants for employment and current employees;
      2. (b) disclosure of the medical or personal records of an individual receiving services or applicant for services of an OPWDD-operated and/or certified facility;
      3. (c) sale or release of lists of names and addresses if such lists would be used for commercial or fundraising purposes. If the request is for a list of names and addresses, the records access officer may ask the requester to identify himself or herself and state the purpose of the request;
      4. (d) disclosure of information of a personal nature when disclosure would result in economic or personal hardship to the subject and when such information is not relevant to the work of OPWDD; or
      5. (e) disclosure of information of a personal nature reported in confidence to OPWDD and not relevant to the ordinary work of OPWDD.

   2. (ii) Disclosure shall not be construed to constitute an unwarranted invasion of personal privacy:

      1. (a) when identifying details are deleted; or
      2. (b) when the person or persons to whom the record pertains consent to disclosure in writing; or
      3. (c) when, upon presenting reasonable proof of identity, a person seeks access to records pertaining to himself or herself under the provisions of the Personal Privacy Protection Law and Part 604 of this Title.
   3. (iii) Notwithstanding the above, access to an individual’s clinical records within the scope of section 33.13 of the Mental Hygiene Law shall be exclusively governed by such section of the Mental Hygiene Law.