Va. Code Ann. § 22.1-289.06
A. The records, information, and statistical registries of the Department and of all child day programs and home-based child care systems concerning services to or on behalf of individuals shall be confidential information, provided that the Superintendent, the Board, and their agents or designees shall have access to such records, information, and statistical registries, and that such records, information, and statistical registries may be disclosed to any person having a legitimate interest in accordance with state and federal law and regulation.
It shall be unlawful for any officer, agent, or employee of any child day program or home-based child care system; for the Superintendent, the State Board, or their agents, designees, or employees; for any person who has held any such position; and for any other person to whom any such record or information is disclosed to disclose, directly or indirectly, any such confidential record or information, except as herein provided or pursuant to § 63.2-105. Every violation of this section shall constitute a Class 1 misdemeanor.
2020, cc. 860, 861; 2026, c. 917.