N.Y. LAB Law § 203-D

§ 203-d. Employee personal identifying information. 1. An employer\nshall not unless otherwise required by law:\n (a) Publicly post or display an employee's social security number;\n (b) Visibly print a social security number on any identification badge\nor card, including any time card;\n (c) Place a social security number in files with unrestricted access;\nor\n (d) Communicate an employee's personal identifying information to the\ngeneral public. For purposes of this section, "personal identifying\ninformation" shall include social security number, home address or\ntelephone number, personal electronic mail address, Internet\nidentification name or password, parent's surname prior to marriage, or\ndrivers' license number.\n 2. A social security number shall not be used as an identification\nnumber for purposes of any occupational licensing.\n 3. The commissioner may impose a civil penalty of up to five hundred\ndollars on any employer for any knowing violation of this section. It\nshall be presumptive evidence that a violation of this section was\nknowing if the employer has not put in place any policies or procedures\nto safeguard against such violation, including procedures to notify\nrelevant employees of these provisions.\n