N.Y. Comp. Codes R. & Regs. tit. 15, § 10.5 – Course content and presentation.

(a) Sponsors must deliver all internet pre-licensing courses using the internet.
(b) Sponsors must utilize all identity and participation validation methods prescribed by the commissioner. Sponsors must make any modifications and updates required whenever the commissioner revises such requirements.
(c) An approved internet pre-licensing course must consist of not less than 270 minutes of instruction. The course shall be given in accordance with a curriculum provided by the department and must be presented using methods and practices acceptable to the commissioner.
(d) Sponsors may administer a course that is delivered in different languages, but no sponsor shall deliver courses that vary in content.
(e) Immediately upon any individual’s completion of a course, sponsors must submit a course completion confirmation to the department in a form and manner prescribed by the commissioner. Within 24 hours of a student successfully completing the course, sponsors must issue a notification of completion electronically to those individuals who have successfully completed the course. The notification of completion must include the name of the student, only the last three digits of the student’s client identification number, the sponsor code issued by the department for the internet pre-licensing course, and the date the student completed the course. This notification of completion is not an official course completion confirmation. Sponsors must not issue a course completion confirmation to the department or a notification of completion to the student prior to the student successfully completing all requirements of the course. Sponsors must indicate on the course completion confirmation the identity of the motorist who completed the course, identity of the sponsor which administered the course, course completion date, method by which the course was administered, and any other information required by the commissioner. Course completion confirmations must only be provided by the sponsor directly to the department in a form and manner required by the commissioner. Sponsors must obtain approval from the commissioner as to the format of the course completion confirmation.
(f) Sponsors must maintain records as required by the commissioner.
Records of individuals who complete a course, or attempt to complete a course, must be retained by sponsors for a period of at least five years from the date the record is created, or the date of course completion, whichever is later. Sponsors must make such records available during such period for inspection and verification by the department.
(g) Sponsors must issue duplicate notification of course completion to any individual who has completed the course upon such individual’s request. Sponsors must not charge individuals for the issuance of duplicate notification of course completion. Sponsors must not issue duplicate notification of course completion more than one year after completion of the course. The duplicate confirmation must have the same expiration date as the original.
(h) Sponsors must notify the department immediately following any security or data breach, or at any time sponsors have, or are notified that there exists, a reasonable belief that a security or data breach has taken place.
(i) In the event a course is discontinued, sponsors must report and provide all course completion information to the department. Sponsors must account for all motorists who participate in the internet pre-licensing course, and sponsors must make all payments due to the department during administration of the course and following course discontinuance.