N.Y. Comp. Codes R. & Regs. tit. 21, § 4700.8 – Grant or denial of access to records.

(a) The records access officer shall grant requests for public access to records pertaining either to information required to be disclosed under the provisions of article 6 of the Public Officers Law or to information that was furnished to the public prior to the enactment of said law, unless such information is exempt from disclosure under the provisions of article 6 of the Public Officers Law or as an unwarranted invasion of personal privacy or otherwise exempt from disclosure.
(b) The records access officer shall deny a request for public access to records or portions thereof which he determines:
1. (1) are specifically exempted from disclosure by State or Federal statute;
2. (2) if disclosed, would constitute an unwarranted invasion of personal privacy under the provisions of subdivision 2 of section 89 of the Public Officers Law;
3. (3) if disclosed, would impair present or imminent contract awards or collective bargaining negotiations;
4. (4) are trade secrets or are maintained for the regulation of commercial enterprise which if disclosed would cause substantial injury to the competitive position of the subject enterprise;
5. (5) are compiled for law enforcement purposes and which, if disclosed, would:
  1. (i) interfere with law enforcement investigations or judicial proceedings;
  2. (ii) deprive a person of a right to a fair trial or impartial adjudication;
  3. (iii) identify a confidential source or disclose confidential information relating to a criminal investigation; or
  4. (iv) reveal criminal techniques or procedures except routine techniques and procedures;
6. (6) if disclosed would endanger the life or safety of any person;
7. (7) are interagency or intraagency material which are not:
  1. (i) statistical or factual tabulations or data;
  2. (ii) instructions to staff that affect the public; or
  3. (iii) final agency policy or determination.
(c) Whenever the records access officer denies a request for public access to records, he shall advise, in writing, the applicant of the reason for such denial and he shall advise the applicant of the latter's right to appeal such denial to the authority's executive director and of the latter's name, business address and business telephone number.
(d) If the authority fails to respond to a request for access to records within five workdays of receipt of a request as required in subdivision (e) of section 4700.2 of this Part, or if access to records is neither granted nor denied within 10 workdays after the date of acknowledgment of receipt of a request, the request may be construed as a denial of access that may be appealed.