Nassau County is three different security markets in 285 square miles

Whichever one you actually live in. Nassau has 64 incorporated villages sitting inside three towns, plus the cities of Glen Cove and Long Beach. If your address is in an incorporated village, that village’s building department is the authority; if you are in an unincorporated hamlet like Levittown, East Meadow or Syosset, it is the town. Several villages even straddle town lines: Garden City, Mineola, Floral Park, New Hyde Park, Old Westbury and Westbury among them.

For most low-voltage signaling and communication work, permits are frequently not required, but that is a determination the local department makes, not one we get to assume. Anything on the line-voltage side (a new circuit for a gate operator, a dedicated receptacle for a head-end) is licensed electrical work handled by an electrician. Nassau County Consumer Affairs is explicit that it does not license electricians; that sits with your local building department, which is one more reason the answer changes village to village.

By deciding what each camera is for before choosing where it goes. There are only three useful jobs: identify a person at a specific point, observe activity across an area, and read a plate. Those need very different pixel densities on target, and a camera set for area observation will never give you a face you can use.

On a typical North Shore property that means a tight identification view at the gate and one at the front door, a plate-reading view aimed down the driveway where vehicles are moving slowly and straight, and a small number of wide overview cameras for the lawn and pool areas. Six cameras placed against that logic beat sixteen placed for coverage, and the recorder and storage cost scales with the ones you actually keep.

The other constraint is the buildings. A pool house, barn or detached garage past 328 feet of channel needs its own switch or a fiber leg, and that decision belongs in the design, not in a change order.

Be careful here, because this is one of the few places where a $200 decision has felony exposure attached. New York is a one-party consent state, which is why a doorbell camera recording your own conversation with a visitor is fine. What is not fine is an unattended microphone recording a conversation between other people that you are not part of. That is eavesdropping under New York Penal Law §250.05, a class E felony.

The practical rule we work to: audio on at a door station where you are a participant in the conversation, audio off by default on area cameras covering a yard, driveway, patio or pool where guests, contractors and neighbors talk to each other. Cameras are also flatly prohibited in bathrooms, changing rooms and fitting rooms under New York General Business Law §395-b, which matters for pool houses and guest suites more often than people expect.

Yes, and that is usually the correct architecture. The building keeps control of the perimeter doors, the lobby, the elevators and the garage, and each tenant gets an administrative scope over their own suite doors: they add and remove their own staff without calling the landlord or us.

The catch is that this only works cleanly on a platform designed for it, with real role separation and per-scope audit. Bolting it onto a single flat system means either the landlord is the help desk for every hire and departure in the building, or every tenant can see every other tenant’s cardholder list. Neither survives a lease negotiation.

Whatever the platform, the accounts are registered in the building’s name, not ours. A building that cannot revoke a credential without a service call does not actually control its own doors.

It is, and it is worse than most people assume. If your fobs are 125 kHz proximity (the older HID ProxCard, Indala, AWID and EM4100 families that most Nassau apartment and co-op buildings still run), they transmit a fixed number in the clear with no encryption and no mutual authentication. Handheld duplicators cost under $20, a card can be copied in roughly fifteen seconds, and retail kiosks in supermarkets now do it for consumers.

The upgrade is a 13.56 MHz encrypted credential using AES with mutual authentication, or a phone-based credential. The realistic migration is a multi-technology reader that accepts both the old fobs and the new ones, a re-badging window of a few weeks so nobody is locked out, then switching off the 125 kHz side. Doing it that way avoids the change that generates 200 angry phone calls in one evening.