N.Y. Comp. Codes R. & Regs. tit. 21, § 10051.4 – Proof of identity.

(a) When a request is made pursuant to this Part in person, or when records are made available in person following a request made by mail, the authority may require appropriate identification, such as a driver's license, an identifier assigned to the data subject by the authority, a photograph or similar information that confirms that the records sought pertain to the data subject.
(b) When a request is made pursuant to this Part, by mail, the authority may require verification of a signature or inclusion of an identifier generally known only by a data subject, or similar appropriate identification.