Answer:
You will have to consult someone familiar with New York law to see if there is a state limitation. In general, however, it's not a good practice to send such nonpublic personal information electronically unless it's encrypted and can be decrypted by the addressee. Sending to a work email address is particularly risky because there is often no expectation of personal privacy in business-hosted email systems.
Sending an email to such an address that simply informs the addressee that his or her mortgage statement is available on your server under secure ("pull") access conditions, does not present the same concerns.
print
share