Main Page/Crash Courses/Systems and Policies/Week three

Week 3: Privacy policies and best practices

• Real time conversation: June 3rd 9:30 - 11:30 Pacific/12:30 - 2:30 Eastern on Zoom https://zoom.us/j/9129428892

Overview

this is the week we should also talk about best practices for low-level stuff, eg hold slips, phone calls about patrons how this ties into the policy stuff

While librarians have always considered privacy among our most sacred core values, our in-library practices leave a lot to be desired. Recent privacy issues with vendors like Kanopy, Lynda.com, and Gale Analytics have brought to light the abysmal privacy practices of library vendors. And while it's easy to criticize these outside parties, our internal privacy policies could also use a lot of work.

This week, we'll hear from four Library Freedom Privacy Advocates about their work on vendor privacy and internal privacy polices. Qiana Johnson and Nicole Becwar from cohort two will discuss how vendors measured up against the privacy prompts in their vendor scorecard (see readings). Then Jessica Krill and Tracy Treece (also cohort two) will discuss how they created their privacy policy template (see readings) and how librarians can put it into place.

Readings

• Vendor privacy scorecard: https://github.com/alisonLFP/libraryfreedominstitute/blob/master/LFI2/finalprojects/Library%20Freedom-%20Vendor%20Scorecard-%20110719.pdf
• Why vendor privacy Q&A (click the download button on github): https://github.com/alisonLFP/libraryfreedominstitute/blob/master/LFI2/finalprojects/WhyPrivacyLicenseQ%26A-Qiana_Nicole.docx
• Library privacy policy template: https://docs.google.com/document/d/1a9n2SAYLua0ELQzAcJtbfpxWg2MRkucL7sM92aniNMo/edit#heading=h.9v96ldaenxun
• ALA Library Privacy Checklists: http://www.ala.org/advocacy/privacy/checklists
• Protecting Patron Privacy: Librarians, Vendors, and Patrons Each Have a Role to Play: https://digitalcommons.du.edu/cgi/viewcontent.cgi?article=1330&context=collaborativelibrarianship
• San Jose Public Library Vendor Security Analysis results: https://drive.google.com/open?id=1jdPwQeC5RAUbBWLAhyIYxWHa0pTdVObc
• EFF’s How to Assess Vendors’ Data Security: https://www.eff.org/deeplinks/2018/01/how-assess-vendors-data-security

Discussion

• What are the elements of a good privacy policy?
• Enforcement
• ideas for getting started
• ideas for future action

Tasks

• Lecture, readings, discussion forum
• Schedule final project checkin with Alison

	Making good privacy/data governance policies, more privacy language, and best practices

Library privacy policy template: https://docs.google.com/document/d/1a9n2SAYLua0ELQzAcJtbfpxWg2MRkucL7sM92aniNMo/edit#heading=h.9v96ldaenxun ALA Library Privacy Checklists: http://www.ala.org/advocacy/privacy/checklists Protecting Patron Privacy: Librarians, Vendors, and Patrons Each Have a Role to Play: https://digitalcommons.du.edu/cgi/viewcontent.cgi?article=1330&context=collaborativelibrarianship

https://twitter.com/KyleKCourtney/status/1384875670363385857

paper shredding

Law enforcement/CCTV readings during privacy policy stuff Privacy policy and vendors -- three weeks total?

glossary for understanding privacy policy and TOS

task -- how does your library's policy stack up. if you don't want to use your library's pick another