N.Y. Comp. Codes R. & Regs. tit. 9, § 369.2
(c) The privacy compliance officer has the responsibility to:
(4) take one of the following actions upon locating the record sought:
(7) if the division fails to locate records, certify, upon request, that: