N.Y. Comp. Codes R. & Regs. tit. 21, § 206.4
Notwithstanding anything to the contrary contained in this Part, the authority may, prior to making records available for inspection or copying, delete such identifying details as the authority may deem appropriate to prevent an unwarranted invasion of personal privacy. Without limiting the generality of the preceding sentence, an unwarranted invasion of personal privacy will be deemed to occur by the disclosure of the information, should it constitute a record under this Part enumerated below in this section, unless the person to whom the record pertains consents in writing to disclosure of such information or unless such information pertains to the person requesting same and such person presents reasonable proof of identity: