N.Y. Comp. Codes R. & Regs. tit. 10 § 43-2.3
All information which may identify an applicant which is received by the program will be confidential and can only be used when necessary for supervision, monitoring or administration of the program. Information received by any contractor, his agents, employees, or by any other person or agency concerning applicants or participants in the program is confidential and may not be disclosed without the written approval of the Uninsured Care Program director, who shall approve disclosure only in conformance with Article 27-F of the Public Health Law and the federal standards with respect to the privacy and security of individually identifiable health information contained in Part 164 of Title 45 of the Code of Federal Regulations.
N.Y. Comp. Codes R. & Regs. Tit. 10 § 43-2.3