N.Y. Comp. Codes R. & Regs. tit. 18, § 485.13
(5) An operator may not retaliate nor take reprisals against any resident, employee or other person for having filed a complaint with or having provided information to a duly authorized ombudsman.
(b)
(1) The operator shall not restrict or prohibit access to resident records maintained by the operator, provided that:
(a)