N.Y. GBS Law § 899-AAA

§ 899-aaa. Definitions. As used in this article, the following terms\nshall have the following meanings:\n 1. "Certificate" means a certificate of registration issued under this\narticle.\n 2. "Department" means the New York state department of state.\n 3. "Document" means any record kept, held, filed, produced or\nreproduced by, with or for a person or business entity, in any physical\nform whatsoever including, but not limited to, reports, statements,\nexaminations, memoranda, opinions, folders, files, books, manuals,\npamphlets, forms, papers, designs, drawings, maps, photos, letters,\nmicrofilms, or computer tapes or discs.\n 4. "Document destruction" means the burning, pulverizing, or shredding\nof a record, or any action taken to render the personal identifying\ninformation contained on a record unreadable and incapable of\nreconstruction.\n 5. "Document destruction contractor" means a person, firm or\ncorporation that owns or operates a business, the principal purpose of\nwhich is to destroy records containing personal identifying information\nfor a fee, and for whom the total cash price of all of his, her or its\ndocument destruction contracts exceeds five hundred dollars during any\nperiod of twelve consecutive months.\n 6. "Personal information" means any information concerning a natural\nperson which, because of name, number, personal mark, or other\nidentifier, can be used to identify such natural person.\n 7. "Personal identifying information" means personal information\nconsisting of any information in combination with any one or more of the\nfollowing data elements, when either the personal information or the\ndata element is not encrypted, or encrypted with an encryption key that\nis included in the same record as the encrypted personal information or\ndata element:\n (a) social security number;\n (b) driver's registration number or non-driver identification card\nnumber; or\n (c) mother's maiden name, financial services account number or code,\nsavings account number or code, checking account number or code, debit\ncard number or code, automated teller machine number or code, electronic\nserial number or personal identification number.\n 8. "Personal identification number" means any number or code which may\nbe used alone or in conjunction with any other information to assume the\nidentity of another person or access financial resources or credit of\nanother person.\n 9. "Record" means any information kept, held, filed, produced or\nreproduced by, with or for a person or business entity, in any physical\nform whatsoever including, but not limited to, reports, statements,\nexaminations, memoranda, opinions, folders, files, books, manuals,\npamphlets, forms, papers, designs, drawings, maps, photos, letters,\nmicrofilms, or computer tapes or discs.\n