N.Y. State Technology Law § 308

§ 308. Personal privacy protection. 1. Any information reported to the\nelectronic facilitator by a government entity in connection with the\nauthorization of an electronic signature shall continue to be withheld\nfrom public disclosure if such information was withheld from public\ndisclosure by such government entity. Electronic records shall be\nconsidered and treated as any other records for the purposes of the\nfreedom of information law as set forth in article six of the public\nofficers law and the personal privacy protection law as set forth in\narticle six-A of the public officers law.\n 2. A person or an entity that acts as an authenticator of electronic\nsignatures shall not disclose to a third party any personal information\nreported to it by the electronic signatory other than the information\nnecessary to authenticate the signature unless the disclosure is made\npursuant to a court order or statute, or if the information or data is\nused solely for statistical purposes in aggregate form. For purposes of\nthis section, "personal information" shall mean data that identifies a\nspecific person, including but not limited to home and work addresses,\ntelephone number, e-mail address, social security number, birthdate,\ngender, marital status, mother's maiden name, and health data.\n