N.Y. Comp. Codes R. & Regs. tit. 21, § 2053.3
(a) The corporation shall provide to each data subject from whom it requests information to be maintained in a record, at the time of the initial request, the notification described in this subdivision. Where such notification has been provided, subsequent requests by the corporation for information from the data subject to be maintained in the same record need not be accompanied by notification unless the initial notification is not applicable to the subsequent request. The notification, which shall be in the form shown in subdivision (b) of this section shall include:
(6) the uses which may be made of the information pursuant to paragraphs (a)(2), (5) and (6) of section 2053.4 of this Part.
(b) Privacy law notification.
The United Nations Development Corporation is requesting personal information from you pursuant to authority derived from the corporation's enabling legislation, chapter 345 of the Laws of 1968, as amended. The purpose for which the information is collected is to enable the corporation to carry out its operations effectively. The information requested from you will be used by the officers and employees of, and those who contract with, the corporation as necessary in the performance of their official duties pursuant to the corporation's enabling legislation.
This information will be maintained in (identify system of record) by