OREGON STATE UNIVERSITY
Open search box
Oregon State University Libraries (hereafter “OSUL”) affirms its commitment to “privacy of inquiry, confidentiality, and no fear of censure or examination” in its statement on Intellectual Freedom. Privacy is essential for free speech, free thought, and free association. OSUL recognizes the possibility of surveillance (whether direct or through access to records of speech or research) of users - undergraduate students, graduate students and faculty, staff, community card holders, and others not accounted for by those statuses - undermines a democratic society. In libraries, the right to privacy includes the right to open inquiry without having the subject of one’s interest examined or scrutinized by others. Oregon Revised Statute 192.355 (23) exempts from disclosure under open records law the records of a library, including: (a) circulation records, showing use of specific library material by a named person; (b) the name of a library patron together with the address or telephone number of the patron; and (c) the electronic mail address of a patron.
This document defines how OSUL intends to respect and protect users’ privacy when using OSUL resources and services. It addresses how OSUL will handle personally identifiable information that the organization may need to collect from users in order to provide services to meet users’ needs. The policy will be reviewed routinely as new technology and practices emerge to ensure OSUL is protecting user privacy. This policy does not cover services provided by other units housed within the Valley Library, such as Student Multimedia Services and the Undergraduate Research and Writing Studio.
Some library services necessitate the retention of some information. Library visitors should be aware of the policies governing records and personally identifiable information. If a library program or service requires the retention of this information, all attempts will be made to inform why that is necessary. As an institution, we will avoid retaining records not relevant to the ongoing mission and focus of the library. We will protect user data to the extent possible. Data we may retain about current library users includes, but is not limited to:
We also collect the following information when users visit the OSUL website and digital repositories:
This is standard practice for web content and information collected is not used for any reason besides evaluating website use and identifying key areas of website development and improvement.
In order for users to access some library services, OSUL must use personal information to create a user account. If you are affiliated with Oregon State University, OSUL automatically receives information from other campus systems, such as Banner, to create and update a user’s main library account. When visiting the Libraries’ electronic services (such as interlibrary loan and library databases), users are asked to provide an ONID username and password. Users may also be asked to provide their university/library account number, phone number, and/or home address.
Some personal and identifiable information collected for OSUL user accounts can be viewed and updated online. Changes to information that is passed from campus systems such as Banner or ONID must be made in those systems. OSUL also creates library accounts for persons within the Corvallis community. These community card users may update all their library account information in person, and they will be asked to provide verification of their identity to do so. It is important for library users to keep personal information up to date to ensure that library operations can function properly. Such functions may include notification of overdue items, recalls, reminders.
Data Retention: OSUL continues to protect personal information from unauthorized disclosure once it is no longer needed to manage library services. Information purged or shredded at regular intervals designated by OSUL includes personal information from reference interviews and instruction sessions, and circulation history regarding materials in our library collections. Transcripts from chat reference sessions are stored in a third party system that anonymizes names. The Libraries’ Special Collections and Archives Research Center is mandated to follow a more strict circulation policy. OSUL manages the University Archives which contains permanent historical records about the University as well as Special Collections materials. In the context of managing and providing access to these materials, SCARC adheres to the Society of American Archivists’ Core Values Statement and Code of Ethics for Archivists. SCARC maintains a separate database and reference file that contain user registration and circulation information, but this information is confidential.
The Valley Library maintains and operates a collection of security cameras meant to preserve a safe environment for all visitors to the Valley Library. The Guin Library at Hatfield Marine Science Center in Newport maintains one security camera at the library entrance. Data are recorded and retained for a period of two weeks. Access to the data recorded from these devices is maintained exclusively by select individuals within OSUL and at Guin. Security camera footage may be released to law enforcement if subpoenaed or at the discretion of the Dean of Libraries. Questionsa about where cameras are located within Valley Library or Guin Library can be addressed to the Valley Library building manager or the director of the Guin Library. Disclosure of data is addressed in the section on Disclosure of Personal Data and Usage Data. More specific information about how long individual records are retained and how users may opt out of sharing personal data is available in a table.
To maximize functionality and access, we ask OSU-affiliated users to use their ONID credentials to log in to online library services. We may require ONID authentication or an OSU ID card for users to borrow materials, request special services, register for programs or classes, or make remote use of those portions of the OSUL website restricted to registered borrowers under license agreements or other special arrangements. Additionally, some library vendors may require users to create accounts to use their online resources or sites; these accounts are not under the OSUL’s control. However, we regularly clear cookies, web history, cached files, or other computer and Internet use records and other software code placed by users on our library computers.
Users of networked computers will need to enable cookies in order to access a number of resources available through OSUL. A cookie is a small file sent to the browser by a website each time that site is visited. Cookies are stored on the user’s computer and can potentially transmit personal information. Cookies are often used to remember information about preferences and pages visited. Users can refuse to accept cookies, can disable cookies, and remove cookies from their hard drives. Our library servers use cookies solely to verify that a person is an authorized user who is allowed access to licensed library resources. We do not share cookies information with external third parties. Some third-party library vendors may use cookies for their sites, but these cookies are not under OSULs’ control.
Our security measures involve managerial and technical policies and procedures, and contractual agreements with system vendors to protect against loss and the unauthorized access, destruction, use, or disclosure of user data. Our technical security measures to prevent unauthorized access include encryption in the transmission of data where possible, and storage of data on secure servers or computers. In the case of a data breach, the policies of the Office of Information Security will be followed.
OSUL permits only authorized library staff with assigned confidential passwords to access personal data stored in the Libraries’ computer systems for the purpose of performing library work. OSUL does not sell or lease users’ personal information to companies, universities, or individuals. OSUL will not disclose personal data collected during reference interviews, instruction sessions, or other activities to any other non-library parties. OSUL also will not make library circulation records and other data related to usage of collections, services and facilities available to non-library parties.
Where required, exceptions include:
Only the Dean of Libraries or designee(s) is authorized to receive and/or comply with requests from law enforcement officers; responses to requests are done in consultation with the OSU Office of General Counsel.
Users must comply with established institutional and library policies and with the law while using the Libraries’ resources and services. Nothing in this statement prevents the Libraries from performing its duties in relation to: enforcement of established University or library rules or policies; compliance with legal obligations; protection of the Libraries’ facilities, network and equipment from harm; or prevention of the use of the Libraries’ facilities and equipment for illegal purposes. If evidence would cause a reasonable person to believe that a violation of laws and/or established institutional or library policies has taken place in its facilities or operations, the Libraries reserves the right to electronically monitor its public computers and network, and/or reveal a user’s identity to institutional authorities. Staff members are authorized to take immediate action to protect the security of library users, staff, collections, data, facilities, computers, and the network.
Questions about this policy can be directed to the Dean of Libraries. Library users who have questions, concerns, or complaints about the Libraries’ handling of their privacy and confidentiality rights may file written comments with Library Administration. The Dean of Libraries will respond in a timely manner and may conduct a privacy investigation or review of policies and procedures.
This privacy policy has been adapted from the University of Oregon Libraries Privacy Statement, which is based on the American Library Association Privacy Policy model. It was reviewed in the 2017-18 academic year by OSUL’s Library Faculty Association, Library Administration Management and Planning, and in FY19 by Oregon State University General Counsel. It became effective October 15, 2019.
PDF formatted OSUL Privacy Policy
Updated 10/15/2019
121 The Valley Library
Corvallis OR 97331–4501
