New York Consolidated Laws, State Technology Law - STT § 203. Model internet privacy policy

(a) a statement of any information, including personal information, the state agency website will collect with respect to the user and the use of the information;

(b) the circumstances under which information, including personal information, collected may be disclosed;

(c) whether any information collected will be retained by the state agency, and, if so, the period of time that such information will be retained;

(d) the procedures by which a user may gain access to the collected information pertaining to that user;

(e) the means by which information is collected and whether such collection occurs actively or passively;

(f) whether the collection of information is voluntary or required, and the consequences, if any, of a refusal to provide the required information; and

(g) the steps being taken by the state agency to protect the confidentiality and integrity of the information.