(a) When a request is made in person, or when records are made available in person following a request made by mail, the corporation shall require appropriate identification, such as a driver's license, an identification card or other identifier assigned to the data subject by the corporation, a photograph, or other similar information that confirms that the record sought pertains to the data subject who made the request and is receiving the record or information.

(b) When copies of records are made available by mail after a request is made by mail, the corporation shall require verification of a signature or inclusion of an identifier generally known only by a data subject, or similar appropriate identification.

(c) Proof of identity shall not be required regarding a request for a record accessible to the public pursuant to the Freedom of Information Law (article 6 of the Public Officers Law).