N.Y. Gen. Bus. Law § 380-k

§ 380-k. Compliance procedures. Every consumer or reporting agency\nshall maintain reasonable procedures designed to avoid violations of\nsections three hundred eighty-b, three hundred eighty-j and three\nhundred eighty-t of this article and to limit the furnishing of consumer\nreports to the purposes listed under said section three hundred\neighty-b. These procedures shall require all prospective users of the\ninformation to identify themselves, certify the purposes for which the\ninformation is sought, and certify that the information will be used for\nno other purpose. Every consumer reporting agency shall make a\nreasonable effort to verify the identity of a new prospective user and\nthe uses certified by such prospective user prior to furnishing such\nuser a consumer report. No consumer reporting agency may furnish a\nconsumer report to any person if it has reasonable grounds for believing\nthat the consumer report will not be used for a purpose listed in\nsection three hundred eighty-b of this article.\n