The American Library Association’s Code of Ethics explicitly states that protecting user confidentiality is a core responsibility of librarians. This means that librarians must ensure patron records are kept private and not shared without consent or legal compulsion.
Create a Transparent Privacy Policy – Develop a clear, accessible policy that explains how the library collects, uses, and protects patron data. Regularly update it to reflect changes in technology and privacy laws.
Limit Data Collection – Gather only the essential information needed to provide library services and avoid storing data longer than necessary. For instance, circulation records can be erased once an item is returned.
Strengthen Security Measures – Protect sensitive data by using encryption, ensuring that library links use secure connections, and collaborating with IT to conduct routine security audits to identify and fix potential risks.
Educate Staff and Patrons – Train library employees on best privacy practices and inform patrons about their rights and how their data is safeguarded. Hosting workshops on digital privacy and security can help empower users to take control of their personal information.
(Re)Assess Vendor Agreements – When partnering with third-party providers, carefully review their privacy policies and ensure they align with the library’s privacy standards. Work to include contractual protections for patron data. Re-evaluate these agreements to make sure they align with your library's policies.
Offer Privacy Controls – Whenever possible, give patrons the option to opt out of data tracking and make privacy settings easy to find and adjust.
Be Prepared for Data Breaches – If a data breach occurs, act swiftly to contain the issue, inform affected patrons, and provide support such as identity theft protection or credit monitoring services (Cavoukian 2022).
Library staff play a crucial role in protecting patron privacy. Ensuring they are well-versed in privacy best practices helps minimize risks, strengthens institutional policies, and fosters a culture of confidentiality. Hosting Data Privacy workshops at your library can help staff stay up to date on best practices and create a safer environment for staff and patrons.
Secure Handling of Patron Data
Conduct a data minimization challenge, where staff identify unnecessary data collected and discuss how to reduce it.
Staff practice anonymizing patron records in different library scenarios.
Explore and Understand Vendor Privacy Policies
Break into groups and review privacy policies from vendors your library uses.
Identify concerns such as data sharing, tracking, or vague/missing retention policies.
Discuss ways to negotiate stronger privacy protections.
Discuss legal and ethical protocols when faced with law enforcement data requests
As a group, Review ALA guidelines and legal obligations on patron privacy.
Discuss how your library will respond and handle these types of requests if/when they occur. Roleplay this scenario.
Educating patrons about their digital footprint inside or outside the library is an important duty of community focused librarians.
Take Control of Your Digital Footprint
Self-Assessment: Patrons complete a checklist to evaluate their current online privacy habits.
Staff discusses the self-assessment in a group setting, and presents solutions where necessary, while also conveying general privacy protocols the library operates under.
Patrons completing the workshop are shown website links to access for more information, contact info for relevant library staff, and perhaps a brochure or reference sheet for privacy info.
Hands-On Privacy Tools Demos
Library staff can give live, hands-on demos dealing with tools like web browser plug-ins that protect privacy, using encrypted messaging apps for mobile devices, using VPNs on personal computers or mobile devices.
Patrons will have the knowledge of what these programs are, how they work, and why they may be necessary. They will also know how to find them.
Tweaking Your Privacy Settings
Library staff can show patrons specific tweaks they can make to the most popular websites and services like shopping sites, social media, etc. to prevent the sharing of their data, and protect themselves online.
Let patrons submit specific sites/programs during a sign-up phase so the demo can be tailored to specific patron needs.