Editing LFI 2024/Month 2

=== Month 2: Privacy in the Library===
* Real time lecture: Friday June 21 2-4PM Eastern / 11-1PM Pacific on Zoom: https://zoom.us/j/9129428892

==== Overview ====
This month we'll discuss threat modeling. We will also talk about library privacy policies and how our practices can often be at odds with them, the data lifecycle in libraries, and library vendors and their various discontents. We'll talk about expectations of convenience from library patrons, and how that conflicts with privacy goals. We'll also be assigning small groups this month.

==== Learning objectives ====
* Learn about threat modeling
* Learn about the data lifecycle in libraries
* Learn best practices for library privacy policies 
* Learn about library vendors and their issues 
 
==== Readings (don't worry about getting through all of them! read what you can!) ====
NEED A READING ABOUT THREAT MODELING 
NEED LIBRARY SPECIFIC VENDOR READINGS 
HOOPLA
LIBRARY MERGERS AND ACQUISITIONS RESOURCE
SOMETHING SARAH HAS WRITTEN 
ADD LFP LAW ENFORCEMENT RESOURCE 

* [https://drive.google.com/file/d/1wepKodHvYpiCWcfF5kV7RNN8h50i6ssW/view?usp=sharing Data Lifecycles privacy advocacy guide]
* [https://groups.niso.org/higherlogic/ws/public/download/16064/NISO%20Privacy%20Principles.pdf NISO Privacy Principles]
* [https://docs.google.com/document/d/1a9n2SAYLua0ELQzAcJtbfpxWg2MRkucL7sM92aniNMo/edit#heading=h.9v96ldaenxunLFP LFP Library Privacy Policy Template]
* [https://www.ala.org/advocacy/privacy/guidelines ALA Library Privacy Guidelines]
* [https://www.plpinfo.org/wp-content/uploads/2021/09/Library-Privacy-and-Vendor-Management-I-Handout.pdf Library Privacy and Vendor Management: A Privacy Oriented Overview of the Vendor Relationship Lifecycle]
* [http://www.ala.org/advocacy/privacy/checklists ALA Library Privacy Checklists]
* [https://digitalcommons.du.edu/cgi/viewcontent.cgi?article=1330&context=collaborativelibrarianship Protecting Patron Privacy: Librarians, Vendors, and Patrons Each Have a Role to Play]
* [https://www.eff.org/deeplinks/2018/01/how-assess-vendors-data-security EFF’s How to Assess Vendors’ Data Security]

==== Guest lecturer ====
Sarah Lamdan

==== Recording ====
* [https://vimeo.com/967107296?share=copy LFI 2024 Month 2 Recording]

==== Discussion ====
* Brief discussion of month one readings 
* How can you use threat modeling to create more robust/holistic privacy policies at your institution? What are the specific details that should get addressed in a comprehensive privacy policy? 
* How does your library's policy measure up to the best practices? (Note: you don't have to identify the library in the discussion)
* What challenges might you face trying to update your library's policy to meet best practices? Implementation? Enforcement? Making the policy a priority at all?
* What should you look for in a vendor agreement, privacy policy, or terms of service?
* Where do you see opportunities for resisting or challenging the vendor practices we discussed today? What are small, harm reduction steps? What are starting points for bigger action?
* What power do we have to advocate against bad vendor practices and products?

==== Tasks ==== 
* Lecture, readings, and participate in discussion questions in Discord