N.Y. Comp. Codes R. & Regs. tit. 14, § 818.6
(2) There shall be a single individual patient record for each person admitted to the inpatient program which shall include, at a minimum:
(xii) signed forms consenting to treatment and for obtaining or releasing confidential information in accordance with 42 Code of Federal Regulations, part 2 or other applicable law.
(b) Disclosures.
Disclosure of HIV and AIDS related information contained in a patient's record shall be made in accordance with the article 24 of the Public Health Law, other applicable State and Federal statutes and regulations, and subject to the additional disclosure requirements of 42 Code of Federal Regulations, part 2.
(c) Reporting to office.
Statistical information shall be reported to the office as required and on the prescribed forms therefor.
(a) Case records.