N.Y. Educ. Law § 344
The score of any test subject shall not be released or disclosed by the test agency to any person, organization, corporation, association, college, university, or governmental agency or subdivision unless specifically authorized by the test subject. A test agency may, however, release all scores received by a test subject on a test to anyone designated by the test subject to receive the current score.
This section shall not be construed to prohibit release of scores and other information in the possession of a test agency for purposes of research leading to studies and reports concerning the tests themselves. Such studies and reports must contain no information identifiable with any individual test subject or user institution unless authorized by that individual or institution.
N.Y. Educ. Law § 344