The rules and regulations set forth in this Part are promulgated pursuant to Correction Law, section 29(2); Public Officers Law, section 87; Public Health Law, sections 17 and 18; 45 CFR part 160, subparts A and B; and 45 CFR part 164, subpart E (December 28, 2000, amended August 14, 2002 and February 20, 2003), the Standards for Privacy of Individually Identifiable Health Information, also known as the HIPAA privacy regulations. These laws and regulations govern the privacy of records, statistics and other information collected, obtained and maintained by the department and information obtained in an official capacity by officers, employees or members thereof.
N.Y. Comp. Codes R. & Regs. Tit. 7 § 5.1