N.Y. Comp. Codes R. & Regs. tit. 21 § 4700.7
In accordance with the provisions of subdivision 2 of section 89 of the Public Officers Law and in conformity with such guidelines as may be promulgated by the Committee on Public Access to Records regarding the prevention of unwarranted invasions of personal privacy, the records access officer may delete from any requested record identifying details the disclosure of which would result in an unwarranted invasion of personal privacy prior to making such record available for inspection and/or copying. In the event that one or more deletion is so made from any document, the records access officer shall provide written notice of that fact to the person given access to the record. If the record is such that the personal matters cannot be fully deleted without substantively affecting the record, or the identifying details cannot be effectively deleted, the records access officer shall deny access to such record as provided in section 4700.8 of this Part.
N.Y. Comp. Codes R. & Regs. Tit. 21 § 4700.7