N.Y. GBS Law § 380-I

§ 380-i. Requirements on users of consumer reports. (a) Whenever\ncredit or insurance for personal, family or household purposes is\ndenied, or whenever a residential rental or lease is denied, or the\ncharge for such credit or insurance, or rental or lease is increased,\neither wholly or partly because of information contained in a consumer\nreport, the user of the report shall:\n (1) advise the consumer against whom such adverse action has been\ntaken of such action,\n (2) supply the name and address of the consumer reporting agency\nmaking the report, and\n (3) inform the consumer of his right to inspect and receive a copy of\nsuch report by contacting the consumer reporting agency.\n (b) In addition to the requirements of subdivision (a) of this\nsection, the user of any such report for purpose of evaluating an\napplication for credit shall furnish to the consumer the reasons for any\nadverse action in relation to such application in conformance with the\nrequirements of the federal equal credit opportunity act (P.L. 93-435,\n15 USC 1691 et seq) as that statute may from time to time be amended.\n (c) Every user of a consumer report or an investigative consumer\nreport shall be prohibited from disseminating any such report to any\nother person unless such other person has a legitimate business need for\nthe information in connection with a business transaction involving the\nconsumer.\n