N.Y. Comp. Codes R. & Regs. tit. 14, § 817.6
(2) There shall be a single individual record for each person admitted to the program which shall include, at a minimum:
(xii) signed forms consenting to treatment and for obtaining or releasing confidential information in accordance with 42 Code of Federal Regulations part 2 or other applicable law.
(b) Disclosures.
Disclosure of HIV and AIDS related information contained in a patient's record shall be made in accordance with the article 24 of the Public Health Law, other applicable State and Federal statutes and regulations, and subject to the additional disclosure requirements of 42 Code of Federal Regulations part 2.
(c) Reporting to office.
Statistical information shall be reported to the office as required and on the prescribed forms therefor.
(a) Case records.