N.Y. Comp. Codes R. & Regs. tit. 4, § 209.4
All requests to inspect and/or copy records, subject to disclosure as provided by this Part, are to be made to the privacy compliance officer.