When a request is made, the authority may require appropriate identification, such as a driver's license, a photograph or similar information that confirms the record sought pertains to the data subject; unless, the record is accessible pursuant to the Freedom of Information Law.
N.Y. Comp. Codes R. & Regs. Tit. 21 § 9001.3