N.Y. Comp. Codes R. & Regs. tit. 18 § 727.1
Information to be safeguarded includes the names and addresses of applicants and clients of the commission and their relatives including lists thereof; information contained in the applications and correspondence; records of evaluations by local rehabilitation agencies acting on behalf of the commission; reports of medical examinations and treatments; resource information; and financial statements; and all other information given or made available to the commission, its representatives or employees or local rehabilitation agencies acting on behalf of the commission in the course of the administration of the vocational rehabilitation program. The foregoing applies to all information secured by the commission or by a local rehabilitation agency acting on behalf of the commission whether or not it is contained in the written record.
N.Y. Comp. Codes R. & Regs. Tit. 18 § 727.1