N.Y. Pub. Health Law § 2997

§ 2997. Patient privacy. 1. The department shall examine state laws\nprotecting the privacy of individual patient data, and determine the\nnecessity of supplementing existing protections.\n 2. The department shall examine federal initiatives protecting the\nprivacy of individual patient data, and such federal initiatives'\npotential preemptive effect on state law protections.\n 3. The department shall provide a report of its findings to the\ngovernor and the legislature within eighteen months of the effective\ndate of this section.\n