N.Y. GBS Law § 380-D

§ 380-d. Disclosure to consumers. (a) Every consumer reporting agency\nshall, upon request and proper identification of any consumer, clearly\nand accurately disclose to the consumer:\n (1) all information in its files at the time of the request concerning\nsuch consumer; and\n (2) the sources of the information; except that the sources of\ninformation acquired solely for use in preparing an investigative\nconsumer report and actually used for no other purpose need not be\ndisclosed; provided, however, that in the event an action is brought\nunder section three hundred eighty-n of this article, such sources shall\nbe available to the plaintiff under appropriate discovery procedures in\nthe court in which the action is brought; and\n (3) the recipients of any consumer report on the consumer which it has\nfurnished;\n (i) for employment purposes within the two-year period preceding the\nrequest, and\n (ii) for any other purpose within the six month period preceding the\nrequest.\n (b) The requirements of subdivision (a) of this section respecting the\ndisclosure of sources of information and the recipients of consumer\nreports do not apply to information received or consumer reports\nfurnished prior to the effective date of this article except to the\nextent that the matter involved is contained in the files of the\nconsumer reporting agency on that date.\n (c) Notwithstanding any other provision of this article, every\nconsumer reporting agency, upon contact by a consumer by phone, mail or\nin person regarding information which may be contained in the agency's\nfiles which has been or may be used for the purpose of providing a\nconsumer report regarding that consumer, shall promptly advise the\nconsumer of the obligation of the agency to provide disclosure of the\nfiles in person, by mail or by telephone pursuant to this section,\nincluding the obligation of the agency to provide a decoded written\nversion of the file or a written copy of the file with an explanation of\nany code used, if the consumer so requests. The disclosure shall be\nprovided in the manner selected by the consumer. All consumers shall be\nspecifically advised that if they have been denied credit in the past\nthirty days they are entitled to receive a written copy of their\ncomplete file, at no charge whatsoever, should they choose to request\nsuch a copy.\n