American Library Association
Core library-focused guidance, templates, and background on privacy and confidentiality in libraries. This is your foundational resource for building privacy policies and procedures.
What You'll Find:
Tip: Start here when creating or updating your library's privacy policy. Use the templates as a foundation and customize for your specific needs.
American Library Association
Overview showing that most U.S. states protect library records and how laws vary state-by-state. Essential when responding to subpoenas or law enforcement requests.
Why It Matters:
Tip: Keep a quick state-law cheat sheet for your legal team. Know your state's specific protections before responding to any records request.
American Library Association
Practical, step-by-step checklists for operational privacy including data minimization, retention, notices, and audits. Great for building policies and standard operating procedures.
Key Features:
Tip: Use these checklists to conduct a privacy audit of your current systems and identify gaps in your privacy protections.
American Library Association
Vendor-contract guidance covering data ownership, retention, and security expectations you should require in RFPs or contracts.
What to Include in Contracts:
Tip: Use this guidance as contract language inspiration when negotiating with ILS/LMS vendors. Insist on these protections before signing.
Institute of Museum and Library Services
Grant-funded, librarian-friendly "how-to" guides on digital security basics, privacy audits, talking with patrons, and vendor/privacy lifecycle. Useful for training and workshops.
Topics Covered:
Tip: Perfect for staff training sessions. Use the field guide exercises to map data flows and identify privacy risks in your systems.
Electronic Frontier Foundation
Practical tools and advocacy resources for libraries, including browser extensions like Privacy Badger for public computers and guidance on limiting tracking.
Resources for Libraries:
Tip: Install Privacy Badger on all public browsers to automatically block trackers and protect patron browsing privacy.
Start Here for Maximum Impact
Pro Tip: Don't try to implement everything at once. Start with a written privacy policy and data minimization, then add technical controls and training over time.
48 states plus DC have statutory protections for library records, but language and exceptions differ significantly. Keep a quick state-law cheat sheet accessible for your legal team.
Important: Understand your state's specific protections and exceptions before you receive any legal request for patron data.
ALA guidance explains what to do when served with subpoenas or search warrants. Have a clear escalation path established before you need it.
Key Steps:
Tip: Create a one-page "Legal Request Response Protocol" for your staff with clear escalation contacts and steps to follow.