N.Y. Comp. Codes R. & Regs. tit. 14, § 550.8
(1) Each provider of services subject to the provisions of this Part shall establish, maintain, and keep current, a record of:
(2) Such record shall be maintained in a manner that ensures the security of the information contained therein, but which also assures the office of immediate and unrestricted access to such information upon its request, for the purpose of monitoring compliance with this Part.
(b) Notifications.
A provider of services must immediately, but no later than within 14 days after the event, inform the Justice Center, and document that such notification occurred, when:
(3) any employee or volunteer who was subject to, and underwent, a criminal history record review in accordance with this section is no longer employed by or volunteering at the program or facility.
(c) Retention and disposal of information.
(3) Disposal of the criminal history information and Justice Center determinations shall be performed in a manner that ensures the confidentiality of the information.
(d) Policies and procedures.
Each provider of services subject to the provisions of this Part shall have policies and procedures designed to implement the provisions of this Part. Amendment of existing personnel and volunteer policies and procedures to reflect these new requirements may be deemed sufficient compliance with this subdivision.
(e) Requests by the Justice Center.
Each provider of services subject to the provisions of this Part shall make information available to the Justice Center as necessary to fulfill its statutory obligations as set forth in section 553 of the Executive Law and subdivision 6 of section 490 of the Social Services Law.
(a) Recordkeeping.