N.Y. Comp. Codes R. & Regs. tit. 7, § 5.35
(a) Within five business days after receipt of a written request for a department record, the records access officer shall determine whether the record requested is in the department's custody and shall respond as provided for in subdivisions (b), (c) and (d) of this section.
Note:
Requests for inmate medical records received by a records access officer should be referred to the nurse administrator of the facility in which the inmate is incarcerated or from which the inmate was released. A copy of the referral letter shall be sent to the requester. Facilities may charge the reasonable fee of 50 cents per page for medical records, as allowed by HIPAA and Public Health Law, section 18. Access to medical records shall not be denied by reason of inability to pay.
(c) If he determines, after diligent search, that the record requested is not in the department's custody, he shall certify, as the case may be:
(d) If he determines that the record requested is in the department's custody, he shall either: