This checklist is intended to help libraries of all capacities take practical steps to implement the principles that are laid out in the Library Privacy Guidelines for Students in K-12 Schools.
Priority 1 are actions that hopefully all libraries can take to improve privacy practices. Priority 2 and Priority 3 actions may be more difficult for libraries to implement depending on their technical expertise, available resources, and organizational structure.
Priority 1 Actions
- Create internal library procedures to protect student privacy based on:
- school policies related to privacy and confidentiality of student data, especially student circulation records and the use of library resources in all formats.
- federal laws such as the Family Educational Rights and Privacy Act (FERPA), Children’s Online Privacy Protection Act (COPPA), and state privacy laws regarding library records.
- ALA and AASL policy statements, online tool kits and Q & A’s, guidelines, and other resources provided by national and state library associations.
- Collect the minimum amount of information necessary about students to conduct library business.
- Configure circulation software to delete students’ borrowing history and retain only necessary records.
- Ensure any paper records with sensitive information are stored in a secure area and shredded when no longer needed.
- Train library staff and volunteers to respect students’ privacy and the confidentiality of their library records.
Priority 2 Actions
- Educate administrators, faculty, and support staff about students’ library privacy and the confidentiality of student data using a variety of communication methods.
- Add privacy-related resources to the library collection including items related to personal privacy, minors’ privacy rights, and privacy as a national and international issue.
- Consider creating a privacy information section on the school library web page or a privacy-themed pathfinder (e.g. LibGuide) with privacy resources.
- Integrate online privacy into library instruction and programming. For example:
- Introduce students to online privacy information such as secure passwords and web tracking during library orientations and other brief presentations.
- Celebrate Choose Privacy Week and other privacy-related observances (Data Privacy Day, Teen Tech Week, etc.) with the school community.
- Create privacy-related displays and set up videos in the library to educate parents during during parent-teacher conferences and other evening school and community events
- Offer presentations to parents about students’ privacy online and other topics of interest to families.
- Advocate within the school or district for protecting students’ privacy rights in learning management systems or other technologies that enable educators to monitor student reading and research habits. Assessment should not include monitoring how students use specific library materials and online resources as part of free inquiry and research.
- Volunteer to serve on the school’s data governance committee. If one does not exist, advocate for its creation.
Priority 3 Actions
- Post the policy in the library and on the library’s section of the school website.
- Work through school lines of authority to write or adapt a K-12 privacy curriculum and have it formally approved and taught. Collaboratively teach privacy units with teachers using the iKEEPSAFE and/or other privacy curricula.
- Work with school officials to incorporate privacy protections into RFP’s and resulting contracts. Discuss privacy concerns with digital resource and technology vendors, especially in regards to the school’s/library’s contracts with these vendors.
- Ensure that all online transactions between client applications and server applications are encrypted.
- Ensure that storage of personally identifiable student information is housed using encrypted storage.
ALA/AASL Policy statements
San Jose Public Library Virtual Privacy Lab (modules in English, Spanish, and Vietnamese)
Digital Defenders (free, CC-licensed kids' booklet about privacy)
Approved January 21, 2017 by the Intellectual Freedom Committee