The New York State Office of Children and Family Services (OCFS) has a privacy policy for child care programs, including home-based day cares. The OCFS may collect or share personal information without consent in certain circumstances. [1, 2]

When OCFS may share personal information [1]

• To perform statutory duties

• To operate a program authorized by law

• To comply with a court order

• To verify a user's identity

• For statistical purposes that cannot identify a specific person

New York State Personal Privacy Protection Law [3]

The New York State Personal Privacy Protection Law (PPPL) also governs how personal information can be shared. [3]

Home-based day care regulations [2]

Home-based day care programs are regulated by the OCFS. The state may inspect child care homes at any time, including interviewing staff and children. [2, 4]

Security measures [5]

Small day care centers that allow parents to view their children online should have adequate security measures in place. These measures include: [5]

• Changing passwords frequently

• Filtering to prevent public access

• Taking corrective action if there is abuse or inappropriate access

• Advising parents of the importance of security and privacy

[1] https://ocfs.ny.gov/help/privacy-policy.php

[2] https://www.nyc.gov/site/doh/business/permits-and-licenses/child-care-family-day-care.page

[3] https://opengovernment.ny.gov/what-you-should-know-nys-personal-privacy-protection-law-pppl

[4] https://www.nolo.com/legal-encyclopedia/starting-child-care-business-new-york.html

[5] https://govt.westlaw.com/nycrr/Document/I8590656d253711e598dbff5462aa3db3?transitionType=Default