[Web4lib] Library Elf reveals user info

[Andrew Mutch]

"I'm no lawyer, but can you really accuse ELF of violating privacy
protection laws when the patron voluntarily handed over their barcode and
PIN?"

No but it could be argued that the library is liable for violating privacy
protection laws by allowing the patron record to be disseminated to a
third-party, even with the patron's authorization. In Michigan, a library
can only release patron information with the written consent of the
patron. Since it's likely that no such written consent exists between the
library and patron to share that information via ELF, there could be a
legal question raised as to whether the library is authorized to allow ELF
to access that information (also recognizing that the same argument could
be made about patrons accessing their records remotely as most of our
systems currently allow).

http://www.legislature.mi.gov/(s5husf2uyqwfyh23unxnchbc)/mileg.aspx?page=GetMCLDocument&objectname=mcl-397-603

Andrew Mutch
Library Systems Technician
Waterford Township Public Library
Waterford, MI