Privacy-First Digital Library Experiences: A Checklist for Evaluating Your Technology

Libraries have a responsibility to protect patron privacy while delivering engaging digital experiences. This checklist will help you assess whether your current (or future) technology partner aligns with your library’s values and your patrons’ expectations.

1. Patron Control

• Patrons can clearly see what personal data the system has stored about them.
• Preferences and consent settings are centralized and easy to manage in one place
• Patrons can opt out of personalization or revoke consent at any time, with changes
  applied promptly.

2. Data Practices that Respect Libraries' Mission

• No hidden tracking or collection of behavioral data beyond what patrons explicitly provide.
• Recommendations and promotions are based only on data patrons have explicitly shared (not inferred or purchased).
• Personalized elements include an explanation like “Why am I seeing this?” so patrons understand the connection.
• No assumptions about interests or behavior without patron knowledge or consent.

3. Transparent Personalization

• No use of third-party ad networks, trackers, or monetization of patron data.
• Vendor policies go beyond legal minimums to meet libraries' privacy standards
• Data is used exclusively to improve library services and engagement, never sold or

  shared.

4. Secure Communication

• Notifications and messages use only the contact information patrons have willingly provided. 
• Email, SMS, or app notifications include clear opt-out or preference links
• Templates and workflows avoid exposing/retaining unnecessary personal information.