N.Y. Gen. Bus. Law § 907
Notwithstanding any other provision of the law to the contrary, all trip data, personal information, images, videos, and other recorded images collected by any peer-to-peer car sharing program administrator that is authorized to operate pursuant to this article shall be for the exclusive use of such peer-to-peer car sharing program and shall not be sold, distributed, or otherwise made accessible except:
Provided, however, that nothing contained in this paragraph shall be deemed to preclude the exchange of anonymized trip data, information, or recorded images solely for the purpose of administering such authorized car sharing program, and provided further that aggregated anonymized trip data may be shared with this state or any of its political subdivisions for non-commercial transportation research or traffic management purposes. Any such exchanges or sharing shall exclude personal information, images, videos, and other recorded images collected by any peer-to-peer car sharing program administrator. For the purposes of this section, "personal information" shall mean information that identifies an individual, including but not limited to name, address, telephone number, and the type and form of payment including credit card number, debit card number, or other payment method.
N.Y. Gen. Bus. Law § 907