New York Consolidated Laws, Insurance Law - ISC § 321. Medical information exchange centers

(a) Whenever any insurance company (which is a member of a medical information exchange center or which otherwise may transmit medical information in whatever manner to any other similar facility including but not limited to an electronic data facility used by two or more insurance companies to determine or aid in determining the insurability of applicants) requests medical information from any applicant for personal insurance, it shall not transmit, nor be considered to have obtained the applicant's informed consent to transmit, the information to any such facility unless such company furnishes such applicant with a clear and conspicuous notice disclosing:

(b) Such notice shall be given to all applicants when any application for personal insurance is completed.

(c) No such facility shall release, transmit or otherwise communicate any medical information it may have to any other person unless such other person shall have in its possession a written instrument signed by the person who is the subject of medical information (or by a parent or guardian if such subject is a minor) specifically naming such facility and authorizing such other person to obtain such medical information from such facility.

(d) No such facility shall maintain information about HIV related test results pertaining to any individual unless such test results are included within a general code, which code is not designated solely for HIV related test results, and concerning which code no member of such facility may request from such facility details sufficient to determine whether the code was used to maintain information about HIV related test results.

For purposes of this subsection, an “HIV related test” means any laboratory test or series of tests for any virus, antibody, antigen or etiologic agent whatsoever thought to cause or to indicate the presence of AIDS.