Protecting the library users' right to privacy—the right to open inquiry without having the subject of one’s interest examined or scrutinized by others, free from fear of government intrusion, intimidation, or reprisal—is one of the core ethical obligations of the library profession. Everyone (paid or unpaid) who provides governance, administration or service in libraries has a responsibility to maintain an environment respectful and protective of the privacy of all users.1
As a means of assisting libraries seeking to encrypt their websites, ALA-OIF has become a sponsor of "Let's Encrypt," a service provided by the Internet Security Research Group (ISRG) operated for the public's benefit. It will allow anyone who owns a domain name – including libraries – to obtain a server certificate at zero cost, making it possible to encrypt data communications with the server and provide greater security for those accessing the library's website and online services.
Apple and the FBI
On February 26, 2016, the American Library Association released a statement in support of Apple, Inc.'s efforts to defend the security of its devices.
Demand for Apple Encryption Tool Threatens Library Users' Privacy (February 26, 2016)
Exploring Information Security and Shared Encrypted Spaces in Libraries (Code4Lib Journal)
Patron Privacy In Online Catalogs And Discovery Services (Choose Privacy Week)
Why We Need to Encrypt The Whole Web… Library Websites, Too (LITA Blog, January 2015)
Privacy and Security for Library Systems Library Technology Reports [May/June 2016]
Human Rights and Encryption UNESCO (2016)