FYI - San Jose Public Library has a post about GDPR, which directs them to
the library's privacy policy and their Virtual Privacy Lab -
https://www.sjpl.org/blog/why-everyone-updating-their-terms-use-and-privacy-policies#.WwVx8mMXJsw.twitter
Thanks,
Becky
Sent from somewhere.
On Tue, May 22, 2018, 4:30 PM Becky Yoose <[log in to unmask]> wrote:
> <IANAL>
>
> With regard to aligning university libraries with GDPR, it might be wise
> to be consistent with the rest of the university in how they are handling
> GDPR compliance. If your organization has no GDPR compliance plan as of
> now, it's still not too late in starting a conversation with the
> organization's compliance or legal officer (which I suspect have been
> bombarded with GDPR information for quite some time now, and might still be
> trying to make sense of it all). There will be a lot of companies that will
> not be compliant by 5/25/2018, so you won't be alone. [1] [2] [3]
>
> </IANAL>
>
> Going back to Erin's original post about using GDPR as an opportunity to
> increase privacy awareness with library users, I'm not aware of any active
> programming tied to GDPR. :c( There are a multitude of sites and
> programming - library and non-library created - that do cover online
> privacy, though, and those can be pulled in to create patron programming
> and sites, if folks need ideas or a place to start. [4]
>
> Thanks,
> Becky
>
> [1] An older article outlying all the moving parts of GDPR and compliance
> on the US side -
> https://wp.nyu.edu/compliance_enforcement/2017/12/11/the-general-data-protection-regulation-a-primer-for-u-s-based-organizations-that-handle-eu-personal-data/
>
> [2] An example of an university response to GDPR -
> https://compliance.miami.edu/focus_areas/gdpr/index.html
>
> [3] Some library-related GDPR posts from the Choose Privacy Week site -
> https://chooseprivacyweek.org/?s=gdpr
>
> [4] A place to start with finding resources and programs -
> https://chooseprivacyweek.org/resources/
>
> On Tue, May 22, 2018 at 3:38 PM David J. Fiander <[log in to unmask]>
> wrote:
>
>> On point two, however, if you're a large school, and you are using web
>> analytics to gather information about usage patterns, then you ARE
>> "monitoring the behaviour of persons in the EU." According to Google
>> Analytics, we had 120 visitors to my library's website in the past week.
>>
>> Realistically, we're not going to get in much trouble about this soon,
>> but we do need to address it.
>>
>> - David
>>
>> On 2018-05-22 05:20 PM, Jodi Schneider wrote:
>> > For most US groups, as far as I can tell, this is about cookies and
>> > disclosure of what information is collected (e.g. on a privacy policy
>> > linked throughout a website).
>> >
>> > IANL, but a compliance-related email I received recently mentions the
>> > limits to GDPR’s jurisdictional provisions:
>> > "The GDPR only pertains to units 1) offering goods or services to
>> persons
>> > in the EU or 2) monitoring the behavior of persons in the EU (including
>> > through cookies on the unit’s websites). If you don’t do either of those
>> > things, the GDPR does not apply to your U.S.-based unit."
>> >
>> > On Tue, May 22, 2018 at 2:54 PM, Craig Boman <[log in to unmask]>
>> wrote:
>> >
>> >> Since we aren't getting much direction from our respective university
>> >> technology departments, is there anything LITA or Code4lib could be
>> doing
>> >> to facilitate some more discussions on the impact of GDPR for US
>> university
>> >> libraries?
>> >>
>> >> Best,
>> >> Craig
>> >>
>> >> Craig Boman, MLIS (Ph.D. student)
>> >> Discovery Services Librarian and
>> >> Assistant Librarian
>> >> Miami University Libraries
>> >>
>> >> 314 King Library
>> >> [log in to unmask]
>> >> ORCID ID: 0000-0001-7511-4078
>> >>
>> >> "There is no education as that which comes from participation in the
>> >> constant stream of events." - Jane Addams (1902, p. 93) Craig Bowman
>> Craig
>> >> Bauman
>> >>
>> >>
>> >> On Tue, May 22, 2018 at 2:48 PM, Sattler, Kelly <[log in to unmask]>
>> >> wrote:
>> >>
>> >>> Hi Erin,
>> >>>
>> >>> I’ve been thinking about it but have no concrete plans. We have a
>> >>> privacy statement linked to in our footer that I need to reread and
>> make
>> >>> sure is clear and accurate. Sadly, I’ve heard nothing from my
>> university
>> >>> yet about what they’re doing.
>> >>>
>> >>> I too am interested in what other libraries are doing.
>> >>>
>> >>> Kelly
>> >>>
>> >>> Kelly Sattler
>> >>> Head of Web Services
>> >>> MSU Libraries
>> >>> 366 W. Circle Drive (#13)
>> >>> East Lansing, MI 48824
>> >>> 517-884-0869
>> >>> [log in to unmask]
>> >>> twitter: ksattler
>> >>>
>> >>> From: <[log in to unmask]> on behalf of Erin White <
>> >>> [log in to unmask]>
>> >>> Reply-To: "[log in to unmask]" <[log in to unmask]>
>> >>> Date: Tuesday, May 22, 2018 at 2:38 PM
>> >>> To: "[log in to unmask]" <[log in to unmask]>, Code for
>> Libraries <
>> >>> [log in to unmask]>
>> >>> Subject: [lita-l] GDPR and your library website
>> >>>
>> >>> Hi folks,
>> >>>
>> >>> Is anyone making changes to your library website, sub-sites, or other
>> >>> digital platforms in order to comply with GDPR regulations?
>> >>>
>> >>>
>> >>> Bonus: if so, are you also working to increase users' awareness of how
>> >>> their data is collected and used across the library, not just on the
>> web?
>> >>>
>> >>>
>> >>> We're mulling a few options here. Our university-level IT group plans
>> to
>> >>> launch a web click-through page before users from the EU can proceed
>> to
>> >>> institutional websites, but our library servers don't fall under their
>> >>> control for this change.
>> >>>
>> >>> I think this could be an opportunity for us to increase privacy
>> awareness
>> >>> for all our users, rather than just EU visitors, and I've seen a few
>> >>> non-library websites present this info to everyone in a way that isn't
>> >>> obtrusive or alarming. But, I haven't gotten a sense of whether this
>> is
>> >>> something other library folks are considering as well.
>> >>>
>> >>> Thanks for anything you've got to share.
>> >>>
>> >>> --
>> >>> Erin White
>> >>> Head, Digital Engagement, VCU Libraries<https://www.library.vcu.edu>
>> >>> (804) 827-3552 | [log in to unmask]<mailto:[log in to unmask]>
>> >>> pronoun.is/she<http://pronoun.is/she>
>> >>>
>> >>> To maximize your use of LITA-L or to unsubscribe, see
>> >>> http://www.ala.org/lita/involve/email
>> >>>
>> >>> To maximize your use of LITA-L or to unsubscribe, see
>> >>> http://www.ala.org/lita/involve/email
>> >>>
>> >>
>>
>
|
