Skip to main content

Policy

Who Can Access School Library User Records?

Submission Date

Question

We got a question from a school library...

I was wondering about student privacy when substitutes are in the library. When I started here, subs were able to use the circulation desk to check out material. However, since September we have had one substitute who is also a parent looking up their children’s accounts. We also had another issue with a different substitute looking up material to see what students were checking out. When I found this out it made me uncomfortable and I am no longer allowing subs to circulate materials. I have had some pushback from subs about the sudden limitations. I was thinking that the information would be along the same lines as an adult volunteer. However, I did not know if subs had more privileges to access student accounts because they are district employees. I would like something in writing to reference if admin ever asks.

Answer

First things first: whether a school board trustee, superintendent, principal, teacher, substitute, or volunteer, everyone must abide by the requirements of FERPA, Education Law Section 2-D, and CPLR 4509, each of which restrict access to library user records.

FERPA restricts access to education records on a “need to know” basis, even for employees.

Education Law Section 2-D restricts access to confidential student information.

CPLR 4509 restricts access to library user records, including those of minors.

Of course, knowing the law is different than following it. Plus, the scenario presented requires consideration of an additional factor: the substitute is a parent who’s looking at their child’s information.

Under the Education Law and FERPA, a parent has a right to inspect their child’s education record, and that is often interpreted to include their school library records.[1]

But! The right to inspect a record is not the same as using employee access to view a record for personal reasons. Unless district policy says otherwise,[2] a school employee taking advantage of their employee privileges to specifically access their child’s records is inappropriate.

Most people—including many teachers—are unaware of the additional layers of protection for library user records in New York State. Substitute teachers assigned to a school library might be given minimal information, and if the library is using volunteers, there may be even more reason to be cautious.[3] For this reason, a posted sign at the staff computer(s) could help emphasize the law and your library’s policy.

Here is sample language:

Use of this computer is limited to checking out and returning students’ selections and answering student questions. Accessing student library records for personal reasons is prohibited by privacy laws and district policy. Confidentiality of library services is an important part of library ethics and our school library system’s policies. If you have questions about this policy, please see [Media Specialist].

Or, if you want to have a more light-hearted approach:

Thank you for helping out today!

Just a few things we have to say:

Library user privacy

Means there are things you cannot see.

We only use the computer system

To check out items and return them.

If a student makes an inquiry

We handle it confidentially.

Borrowing records, what’s checked out

Can’t be casually talked about.

If you have a question about this list

Please ask the Media Specialist.

So welcome to our library crew!

Service with ethics is what we do.

Whenever possible, discussing policy guidance and signage like this with a supervisor and/or building principal, so they can back you up in the moment, is a wise idea.

In 2026, standing up for privacy and respect for laws governing electronic access to data grows more critical every day. Care on this topic is a sign of professionalism.[4]

Many thanks to the member for a thoughtful and important question.


[1]^ For more information, see Patron Confidentiality in School Libraries.

[2]^ I can’t imagine a district policy allowing this, but I have learned to never say never.

[3]^ For more, see Adult and Student Volunteers in School Libraries.

[4]^ Is standing up for privacy with doggerel poetry a sign of professionalism? I’ll leave that up to you.

The Library Law of Lost & Found

Submission Date

Question

What are the legal requirements, or best practices, for libraries handling lost or unclaimed property, i.e. patron items left inadvertently at the library?

For items like lost library cards where the owner’s identity it easy to find, we look up the patron record and attach a note to it, then place the card in Lost & Found. But what about things like electronics? We’ve had a lost cell phone in L&F for several months now. I assume for privacy reasons we should never access the phone in an attempt to learn the owner’s identity?

Three area directors I’ve asked said that after one month, they give unclaimed phones to their local police department. Is this a legal requirement or simply a best practice? What about other found items, like money? Can money, after a period of time, be given to the library’s Friends group or kept by the library itself, or should it be turned over to the police as well?

Thanks.

Answer

In New York State, lost property is controlled by Personal Property Law Article 7-B.

In that law, “Property” is defined as:

  • money (cash and coins)
  • “instruments” (checks, money orders)
  • goods (a.k.a. “stuff”)

Exceptions to that definition are:

  • animals
  • shipwrecks[1]
  • vehicles (but not bicycles)

 The law presumes lost Property to also be “mislaid” or “abandoned” property.

And this is where things get tricky.

For lost property worth $20 or more, the property must be deposited at the local police station within 10 days; failure to do so is a misdemeanor and can lead to a fine of up to $600.

For property worth under $10, there is no obligation to turn it over to the police, and if the finder made an effort to find the owner, the finder becomes the owner after 1 year.

For property valued between $10 and $19.99, the law creates a gray zone (likely due to sloppy updates). 

Depending on the value of the property turned over to the police, it is retained for a set period of time, after which it is either returned to the original owner, given to the finder (who becomes the owner), or auctioned off, with the proceeds going to the municipality (or in the case of property lost at a SUNY campus, to SUNY).

When in police custody, the property has an interesting journey, as there are several steps the police must take to try and locate the original owner. These steps are impacted not only by the value of the property, but how it was found, if crime was involved, and if it is in “instrument” (like a check). Suffice it to say that the job of “Policy Clerk for Lost Property” is either a dream fob for a highly detail-oriented person who appreciates eclectic tchotchkes or a punishing nightmare for a person who entered law enforcement because they didn’t want a desk job.

What does all this mean for a library, museum, or other institution where people regularly leave behind glasses, cell phones, handbags, etc.?

First, it means that even though it sounds like a good idea, simply giving lost property to a Friends group, or another charitable group, is not an option.

Second, it means that every library and museum should have a Lost Property Policy.

Third, it means that if you are the type of institution that might find a shipwreck,[2] you should also have a Shipwreck Property Policy.

A good “Lost Property Policy” should cover all the points raised by the member’s questions: procedures for efforts to find the owner, procedures for properly turning it over to the police when required, and procedures governing how the property will be used if it is returned.

While every institution might want to add its own flourishes, here is a template for doing that (it’s in italics so you can distinguish it from the rest of this answer):

ABC Library Lost Property Policy

Position responsible for compliance: INSERT

Adopted on: TEMPLATE DRAFT

Reviewed by the board every: INSERT

Policy

It is the policy of the Library to follow New York State’s law on lost property (Personal Property Article 7-B) and to use the Library’s best efforts to reunite visitors with lost property. To the end, the Library follows the below procedures, and any proceeds from lost property are directed to the Library’s [INSERT FUND].

Procedures

Every day, the Library assesses personal property has been left behind at the Library; such property is “Lost Property.”

Items of no discernable value, items that pose a potential hazard, and items which appear to be refuse (scrap paper, empty cans, soiled clothing, etc.) will be disposed of immediately.

Items that appear to have value (including but not limited to bags, phones, clothing, technology, personal items such as brushes or cosmetics) will be logged in a Lost Property list that notes the date and location of the item when found, the estimated value, together with any relevant information known by the Library.

Estimated Value will be established on a good-faith basis. The Library does not regard accurate valuation of Lost Property as a job requirement of any employee. The Library does not accept any responsibility for errors in assessment of value.

Items with an estimated value of over $20.00 shall be stored in a locked area and in a clearly marked receptacle designated for Lost Property.

Consistent with the law, the Library will turn over Lost Property estimated to be over $20.00 in value to the INSERT Police Department ten days after being found.

Receipts for Lost Property issued by the Police Department pursuant to Personal Property Law Section 253 will be retained by the Library for at least # years.

Owners seeking the property after it is conveyed to the Police Department shall be referred to the INSERT Police Department, with a copy of the receipt if one is requested.

If Lost Property is returned to the Library by the INSERT Police Department per Personal Property Law Section 254 (because no owner has come forward, and the Library is now the owner), the property shall be [donated to the Friends of the Library for a sale to benefit the Library; sold by the Library to benefit a [specific program]; donated to [a specific charity]. The Library reserves the right to depart from this standard procedure if the nature of Lost Property and/or the priorities of the Library merit a different disposition.

Items with an estimated value of under $20.00 shall be kept in an open area and in a clearly marked receptacle designated for “Lost and Found.” After one (1) year in “Lost and Found,” items valued under $10.00 shall become the property of the Library, and the Library will dispose of such items as it deems appropriate.

The Library will make a good faith effort to alert owners of Lost Property but will not access technology or open private documentation to do so. The Library will not use significant employee time for such efforts unless the Director determines such effort is consistent with the Library’s service to the community. Examples where such extra effort may be warranted are: Lost Property that appears to meet a medical need, jewelry in excess of $500.00 in value, cell phones, computers, wallets, and [ADD YOUR OWN].

 

Thank you for a great question!

Now we just need a member to find a shipwreck…


[1]^ Shipwrecks get their own law.

[2]^ I’m looking at you, Whaling Museum.

The Legalities of Patron Data on a Shared ILS

Submission Date

Question

According to the RAQ: Using Emails from ILS Patron Database: “Although a member library contributes information to an ILS, unless system bylaws or policies say otherwise, that information belongs to the system, who is just as ethically and legally bound to protect the information as a member library.”

However, there was a question during a session at NYLA regarding system ownership of library records that seemed to contradict this.

If the system owns the ILS and therefore the library records, wouldn’t that mean that policies pertaining to accessing/creating/modifying/deleting records for the ILS should be governed by system policies that are also approved by each member library board?

I’m specifically thinking of such policies as Confidentiality of Library Records / Inquiries from Law Enforcement - where if the system owns the records then wouldn’t both these policies just be a system one? Also with having consistency for Library Card Applications. A patron can go to one of our libraries and have to show many forms of identification - but the same patron could see us at an outreach event and not even have to show their ID to get a card.

Answer

This submission has it all—attention to detail, a blend of law and policy, and a reference to a past ATL.[1]

It also shows what’s at stake for libraries when we ask these two questions: who “owns” all that data on an ILS? Who sets the terms of cardholder access?

As the members questions point out, uncertainly about these issues can cause complications

Before we jump into the details, there is a critical take-away: while there is no one right answer to these questions, every library and every system should know their particular answers.

To make this answer as helpful as possible, we’ll spend a little time on why there is no single right answer to this issue. After we review the “why,” we’ll review the spectrum of approaches. And after all that, I’ll provide a diagnostic form so your library or system can assess where it stands.

The “Why”

Why is there “no one right answer” to who owns ILS data and who sets the terms of cardholder access? Because the law and its regulations give library systems and members infinite flexibility on those topics.

That flexibility means there is no prescribed model of ILS.[2] Instead, the law[3] simply conditions certain state aid on a system having “an automation program to support bibliographic control and interlibrary sharing of information resources of member libraries, and to coordinate and integrate the automated system or systems of such member libraries consistent with regulations of the commissioner.”

Those “regulations of the commissioner” state: “The plan of each public library system shall provide for coordination of the reference and interlibrary loan programs and functions of the public library system with the approved plan of the reference and research library system of which it is a member.”[4]

That’s it. There are no laws or regulations saying how that must be done.

Because of that, the “rules” of an ILS and its impact on cardholder access come from charters,[5] bylaws, contracts, and policy—all of which are set by a system’s board of trustees and then accepted by the member libraries.

This approach has led to there being a spectrum of ILS policies in New York State.[6]

Let’s explore this spectrum.

The ILS Spectrum

Library systems are formed to offer “improved and expanded”[7] library service.

To qualify for certain state aid under Education Law Section 273(d), systems must implement an “automation program to support bibliographic control and interlibrary sharing of information resources of member libraries, and to coordinate and integrate the automated system or systems of such member libraries consistent with regulations of the commissioner…”

How a system meets those requirements is up to the system. To illustrate how differently systems can do that, here is a range of solutions:[8]

One system puts major rules for ILS right in its bylaws, including that all ILS contracts and policy must be approved by the board. This is an “ILS by Bylaws and Board” model.[9]

Another system has bare-bones bylaws, but ILS policy, pricing, and contracts can only be approved by the board of trustees. This is an “ILS by Board Only” model.

Another system wants more “on the ground” input, and it wants that input to have power. It creates a council to assess ILS policy, pricing, and contracts, and those things can only be changed by the board of trustees after approval by the council. This is a “Two-Step Approval ILS Policy” model.

Another system finds bylaws and policy revision cumbersome and puts all the terms for the ILS in an “ILS Participation Contract” that must be approved by the system board and then by the board of each participating library. This is an “ILS by Contract” model.[10]

Another system wants to have ongoing stability, so it puts part of the ILS process in the bylaws, some in board-approved policy, and then outsources more mutable aspects (like pricing and desired tech functions) to a committee (or committees). The system believes in the power of shared governance, so it asks another group (usually of directors) to assess ALL changes to policy before approval by the board. And finally, it uses an annual contract process to confirm pricing and updated security measures. This is an “ILS By Everything” model.

See what I mean about diversity?[11] And these five models only illustrate a broad range of approaches; within this range, any number of permutations exist.[12]

Where your Library/System Stands

All this diversity and flexibility means it can be tough to sort out answers to the questions raised by the member:

  • Who “owns” all that data on an ILS?
  • Who sets the terms of cardholder access?

To answer them—because as was said at the beginning, no matter what the answer is, it must be clear—it is helpful to review certain documents while asking certain questions.

Here they are:[13]

QuestionWhy it’s important

Does your library have a policy governing the terms of getting a library card?

NOTE: Libraries can have a policy of issuing cards only to “resident” borrowers, even though they must honor the cards of nonresident borrowers issued by other member libraries and the library system.

If so, attach the policy.

If your library doesn’t have a policy, the only terms will be those on the application form and those in the policy of the system.

Does your library have an application form governing the terms of getting a library card?

NOTE: Libraries can have a policy of issuing cards only to “resident” borrowers, even though they must honor the cards of nonresident borrowers issued by other member libraries and the library system.

If so, attach the form.

If your library doesn’t have a form, you might not be informing the patron of your library’s conditions for getting a card.

 

Does your system have a policy governing the terms of getting a library card?

If so, attach the system’s policy.

The system’s policy should be a “floor” that sets the base terms. Your library can add additional terms, so long as they don’t restrict the direct access of non-resident borrowers.

Does your system have an application form governing the terms of getting a library card?

NOTE: Unless a charter, bylaws, or policy says otherwise, systems can issue cards without the person being served by a member library.

If so, attach the form.

The system’s policy should be a “floor” that sets the base terms. Your library can add additional terms, so long as they don’t restrict the direct access of non-resident borrowers.
Attach the system’s charter and bylaws.They most likely don’t address the issue of ILS, but never say never in Libraryland!
If the system has an ILS Policy, attach the system’s ILS policy.NOTE: Some systems have multiple policies that address different aspects of ILS (operations, privacy, security, costs, routine assessment, etc.). Attach them all.

Is there a contract (or other written agreement) between the system and the Library governing ILS services provided by the system?

If yes, attach the contract.

NOTE: While a contract approved or acknowledged by the board of a member library is the most formal method, some systems may use an “MOU” or other less formal instrument.

Looking at the documents you’ve assembled, answer this question:

Whose privacy policy governs a cardholder’s data?

The answer must be:

1. Both the library’s and the system’s

2. Only the library’s

3. Only the system’s

If the answer is “both,” that’s okay! Privacy can stack. Just make sure that the library and system are actually doing what has been assured by the policies and that they don’t contradict each other.

Looking at the policies and forms, answer this question:

Whose data security policy governs the cardholder’s data?

The answer must be:

1. Both the library’s and the system’s

2. Only the library’s

3. Only the system’s

If the answer is “both,” that’s okay! Security can stack. Just make sure that the library and system are actually doing what has been assured by the policies and that they don’t contradict each other.

Looking at the policies and forms, answer this question:

Whose policies did the cardholder agree to follow to get a card?

The answer must be:

1. Both the library’s and the system’s

2. Only the library’s

3. Only the system’s

4. Every participating library’s

If the answer is “both” or “every participating library’s,” that’s okay, unless the terms don’t harmonize.

For instance, if a library’s policy says that cardholder privileges will be suspended due to a Code of Conduct violation, is there clarity about how that suspension will impact system access or access at member libraries?[14]

Looking at the bylaws, policies, and contracts, answer this question:

Who sends the patron a notice if there is a data breach at the library involving their patron data?

The answer should be “the library”, although the system (which may have more technical capacity) can agree to help (up to and including doing it).

Looking at the bylaws, policies, and contracts, answer this question:

Who sends the patron a notice if there is a data breach at the system involving their patron data?

The answer should be “the system,” and there should be a clear process for the Library to get notified about the impact on it patrons.

Looking at the bylaws, policies, and contracts, answer this question:

Who must preserve evidence on the ILS if there is a directive to do so?

The answer must be:

1. Both the library and the system

2. Only the library

3. Only the system

Looking at the bylaws, policies, and contracts, answer this question:

Who must disclose patron data on the ILS if there is a proper subpoena, warrant, or court order?

The answer must be:

1. Both the library and the system

2. Only the library

3. Only the system

Looking at the bylaws, policies, and contracts, answer this question:

Whose insurance covers loss of a library’s data on the ILS due to natural disaster, negligence, or criminal activity?

The answer must be:

1. Only the library’s

2. Only the system’s

What record retention policy governs the retention of the patron’s records on the ILS?

Follow-up question: How are the records disposed of when the retention period is over?

The answer must be:

1. Only the library’s

2. Only the system’s

Public libraries are obligated to retain certain records for prescribed periods (See the LGS-1).

Are there any technical functions of the current ILS system that complicate the above factors or make them impossible to sort out?

The answer will be:

1. No

2. Yes

If “no,” that is great news, because such complications are a true pain.

If “yes,” the complications should be continuously documented and then addressed when the ILS contract is next assessed for renewal or termination.

And that’s it!

Who “owns” all that data on an ILS? It depends, but the rights and obligations of ownership should be clear between a system and its members.

Who sets the terms of cardholder access? It depends, but the rights and obligations of cardholders, member libraries, and the system should be clearly set in guidance, forms, contracts, and policies.

Thank you for submitting such a great question.


[1]^ If I was “Stefon” from SNL, I’d add “library cart axle grease, book club groupies, and book signings in a hot tub,” but I am not.

[2]^ Flexibility means diversity! This is a strength, unless the lack of prescription leads to uncertainty.

[3]^ Education Law Section 273

[4]^ 8 NYCRR 90.3(k)

[5]^ Charters don’t typically speak to ILS terms, but they are so fundamental, it feels wrong to omit them from this list. Like a grumpy fairy, if they are left out, it could result in mischief.

[6]^ And when I say “spectrum”...we are talking triple rainbow.

[7]^ Education Law 255 (2).

[8]^ None of the models in this answer are from particular systems I am familiar with. So, if you are at a system and feel seen, that’s great, but I am painting with a broad brush here!

[9]^ I don’t know of any system that does this, but it is feasible.

[10]^ Such models can be annual or for longer terms. Generally, at least one fiscal year’s worth of notice is needed to leave.

[11]^ Further complicating things is that ILS is often lumped in with web services, e-mail, delivery, and other services systems offer to help libraries maximize services.

[12]^ A mathematician, a lawyer, and Library IT manager all walk into a bar…

[13]^ It is none of my business how a library or system does this, but I advise using a buddy system. While the friendly table above makes this look simple, much of this requires a “search” function, a highlighter, and a calming herbal tea.

[14]^ This is especially important to coordinate when it comes to public safety. A system should have a policy to ensure that if a person loses privileges at one library, there is clarity about how that impacts access to other member libraries. Simply posting an unofficial warning via an ILS puts you at risk of a civil rights violation claim by the barred patron. This is also a priority to ensure worker safety.

Is a Public Library Responsible for Patron Conduct Outside the Library?

Submission Date

Question

Our public library has been told by patrons that another patron is following up on interactions at the library, including at the circulation desk, by showing up at the reporting patrons’ homes. Such behavior, if harassing, is against our Code of Conduct. Does our library risk legal liability for this?

Answer

I am sure many a wonderful friendship has been launched at a public library, but for this question, we’ll assume that each of the reported incidents were unwelcome.[1]

To best address this matter and limit liability, the unwelcome nature of the behavior—and the Library’s response—should be documented every step of the way.

For example, the initial report of the first instance can be: Patron A reported that Patron B arrived at their house at ADDRESS on DATE/TIME uninvited to follow up on a conversation at the library on DATE/TIME. Patron A does not welcome this conduct and would like it to not recur.

Because the interaction started at the Library and was related to library services, it is appropriate to respond to this as a Code of Conduct matter, and document it as such.

The follow-up with the offending patron could then be:

Dear Patron B,

The library has received a complaint that on DATE, you sought to continue a conversation at the circulation desk of the library by arriving uninvited at another patron’s home.

If you were invited or did not visit at all, please send us a written response confirming that.

Otherwise: a copy of the Library’s Code of Conduct accompanies this letter. Please take care to not continue Library service interactions in a manner that is not welcome by that person, as it could be considered a violation of the Code.

NAME, you are a valued patron at the library, and we trust this will not be an ongoing concern.

Sincerely,

Library Director

The letter can be reviewed in person with the offending patron or sent by mail or email; that is at the discretion of the Director. The important things are accuracy and timeliness.[2]

It is also important to double-back to the impacted patron and let the know the matter has been addressed. Sample text for that is:

Dear Patron A,

Thank you for sharing your concern about an uninvited visit at your residence by a fellow library patron following an interaction at the library. Please know that the Library has alerted the other patron that such behavior is not consistent with the library’s Code of Conduct. In the event further concerns occur, please let me know immediately.

Sincerely,

Library Director

When a library director has to address this type of thing, they should be aware that such behavior can have many motivations. Some motivations may be malevolent, but others may be worthy of compassion, including loneliness or uncertainty about social boundaries. When it comes to documenting and handling the report, however, the motivation is irrelevant; the goal is to outline the behavior, the rule it violates, and explain the consequences for recurrence.

This type of documentation serves multiple purposes in the legal world.

First, it unambiguously documents the date and time of the occurrence and a key element: that the visit was unwelcome.

Second, that clarity enables a clear articulation of the rules and possible consequences.

Third, it documents that the library has done all it is empowered to do to address this situation. After all, a public library is not law enforcement; it can enforce its own Code of Conduct but cannot police the external activities of others. In fact, a library that tells patrons not to go to places outside the library, at the risk of losing library access, may be violating the First Amendment. Quite the legal tightrope for a library director to walk![3]

Having outlined all this, I will now answer the member’s actual question:

Our question is if the Library would hold any responsibility or liability if anything were to happen based on a conversation that happened at the library but the actions of follow through occurred off library property?

The answer to that will almost always be “No.” Exceptions are:

  • If the library provided the personal information that enabled the visit;[4]
  • If the victim was an employee;[5] or
  • If the activity is part of a larger issue currently under investigation by law enforcement (stalking, harassment, domestic violence, protective order in place, etc.).

When the above legal aspects are involved, a public library is wise to timely consult an attorney to document and determine next steps.

Other than the legal risks, the other big risk in this matter would be reputational: if an incident occurred, the subsequent investigation found out that there had been multiple reported concerns (as is posed by the question), and the library had done nothing, it could negatively affect how the library is regarded by the community.

But again, a public library is not law enforcement; other than barring access to the library, it has limited ability to punish or prevent crime.[6]

So, with all that, the big takeaways for this question are: 

  • All patron complaints related to safety and access should be documented;
  • All incidents relating to safety or access should be addressed so the library is positioned to restrict the access of the offender;
  • Any person facing loss of library access due to a Code of Conduct violation should receive a written notice and a chance to refute the accusation;
  • When legal liability or a risk to safety is involved, it is wise for a library director and/or board bring in back-up.

When a director meets with such a person (who might not have quite the same view of the world as the director), it is wise to have a person there as a notetaker and for safety.

Thank you for an important question.

 


[1] I don’t mean to imply that showing up at someone’s house uninvited is ever a gateway to friendship. Don’t do that! It’s a bad idea.

[2] Depending on the exact circumstances, an immediate bar may also need to be enacted, rather than just a “written warning.”

[3] But just another day in the life.

[4] I flinched just typing this. I know a librarian would not release information that way!

[5] Library workers being stalked/harassed is why every public library should have a Workplace Violence Prevention Plan. For more on that, see

[6] It’s a bit different when the library is the victim, but this answer doesn’t address that.

Patron privacy regarding recording devices and minors

Submission Date

Question

Is the library at risk if a teen patron volunteers to share contents of a cell phone?

An adult patron recently called the library and said that her 11-year-old daughter reported being filmed outside the library (parking lot or backyard). The child reported that two teen patrons had been using cell phones to film her. No staff witnessed this, but all of the juveniles involved were known to library staff. The two teens had returned inside the library at the time the call came in, and staff asked them if what was reported was true. Both denied the claims, and one asked to “prove” that it wasn't true by showing the contents of his cellphone video library. Do we put ourselves at risk by allowing a patron (juvenile or otherwise) to show us such content? We can see a variety of ways that this might expose us to risk, but we also understand the teen’s impulse to defend himself.

Additional questions that came up (but maybe too much for a single query): If patrons do film each other without consent on library property, is that a further risk for us? If we were to explicitly state that filming others while on library property is against policy, how could we safely enforce that policy?

Answer

Before I dive right into the answers (we are going to address every question), let me say what a lot of readers are probably thinking: most tech-savvy people know how to modify their phone so a recording they made doesn’t show up in their files. So, this answer will not only review the questions about sensitivity and liability but also discuss the practical concerns of enforcing a Code of Conduct when a decision turns on dubious evidence.

First, let’s talk about a policy on recording.

Any public library should feel confident adopting a policy limiting use of recording devices in areas where privacy of library users is assured.

For some libraries, this rule may be limited to the service desks and common rooms where people are reading, using computers, and accessing other specific library services and programs. For others, this rule may apply to the entire interior of the library.

Some libraries may even want to bar recording in their parking lot and grounds (a factor relevant to the member’s questions), but this may be harder to justify on the basis of privacy, as there is no guarantee of privacy when walking out in the open.

So, for argument’s sake, let’s say the member’s library does have a policy, but it doesn’t extend to the outside. What else could help with the situation presented here?

In addition to a policy on recording in the library,[1] any library can use its code of conduct to prohibit the deliberate antagonism[2] of one person by another on library property.

Once a person reports such a violation, it is up to the director of the library (or librarian in charge) to ensure the policy for evaluating a code of conduct violation is followed.

Library codes of conduct vary from place to place, but a good policy will always follow this pattern: notify the person of the accusation in writing, let them know the penalty that could be imposed, and provide a reasonable opportunity for the person to respond prior to that penalty starting. If the matter involves a very clear risk to safety or compliance (a physical threat, sexual harassment, etc.), the person can also be temporarily barred from the library while the matter is pending, if the policy allows it. After a decision is made, there should be one level of appeal (usually to the board of trustees after a decision by the library director, but in a larger organization, the final appeal can be to the director after a decision by another employee).

If the matter is being handled by law enforcement, the library should still follow its own policy before removing library access and privileges (this is true even if there is an order or protection put in place).

When the accused person is a minor, that person’s parent or guardian should be notified to the degree consented to by the minor (possibly as part of getting a library card) or as stated by the policy.

If, after being accused in writing, a person volunteers to “prove” their innocence by showing their phone, the library should consider if the risk of intrusiveness[3] is worth it; likely it is not. Far better is to hear from the complaining person and the accused person a recital of what happened, decide what is most likely to have happened, and if a violation did occur, decide what penalty will help create assurance of respect and safety going forward.

This is particularly true in a case like this, where unless some other aspect makes the recording harmful (Has it been shared on social media?[4] Was the person being bullied at the time?), the consequences for doing what the youth was accused of will likely be a warning.

How would this “due process” roll out? After getting the complaint, it would start with a letter stating:

On DATE, a library user reported that she was concerned that you were recording her on library property (outside, at TIME), after she requested not to be recorded. If this happened, this is against the Library’s Code of Conduct, which prohibits INSERT.

The Library will be reviewing this report, and we invite you and your parent/guardian to provide a statement in response. You may also come in at DATE/TIME to discuss this with me.

Because it is important for library users to feel safe and respected at the library, if this did occur, it may result in a warning, or a temporary loss of library privileges. If we impose a temporary loss of privileges, you will be able to appeal it before it goes into effect.

Although the situation in the member’s question does not require it, if a reported violation is more serious (a threat, an injury, property damage, etc.), here is the language for a temporary bar on access to the premises:

Because this report relates to [a threat to safety, serious injury, etc.], until this is resolved, you are barred from library premises. You may still use library services remotely. If you need assistance to arrange services remotely, please call NUMBER to work with POSITION[5] or e-mail PERSON.

Taking this careful, deliberate approach does more than assure due process; it also slows things down and gives an accused person and their accuser time to think. It makes sure both parties can be heard. If the people involved are minors, it provides adequate notice and opportunity for parents and guardians to be involved.

Just as important: it is gentler on library workers, who should not have to serve as the sudden judge and jury of disputes between patrons (but of course, often do).

This brings things full circle to the original question: Is the library at risk if a teen patron volunteers to share contents of a cell phone?

The answer to that is YES. That risk includes everything from the simple optics of invading the privacy of a minor to compromising their rights without their parent or guardian present. It is a situation that begs for a formal complaint to a board and/or for public relations fallout. When you consider that the evidence to be provided is probably of dubious value, these risks completely undermine the worth of such access.[6]

While it can take more time, addressing things in a calm, formal manner can teach people (particularly young people) that they have rights. For certain disputes,[7] if the library identifies a way to mediate the issue[8] and help the young library users reconcile their differences, that is fine, too.

Thank you for a thoughtful array of questions.


[2] I am using “antagonism” because “harassment” is a legal term, both in criminal and civil law (where it has multiple defined meanings). “Antagonism” is the act of making someone else mad, which is what will happen if a person states they are not to be recorded, and they are recorded anyway.

[3] Those risks are accusation of invasion of privacy, coercion, duress, and inappropriate pressure on a minor. Further, as discussed, the risk is that the savvy person has already deleted or hidden the recording.

[4] In which case you may have evidence of it having been made, without looking at the phone.

[5] If the person threatened a library worker, make sure they are not working remotely with that library worker.

[6] Any situation where it would be worth it—such as one involving an alleged recording of a physical threat—is probably worth a report to police, who will conduct their own investigation.

[7] Where is will be restorative, not simply convenient.

[8] Some regions have great mediation and alternative dispute programs, especially for young people.

Library cards for minors

Submission Date

Question

I’m assuming the age requirement for youth cards varies widely even among NYS libraries, but what are the key determining legal factors which inform how libraries settle on an age range for this policy? I can think of three factors, and libraries likely conflate all of them together. I’d like to extrapolate the real legal concerns so that I can more clearly determine our own library’s circulation policies regarding permission for youth cards.

1. Is the signature to allow for “parent permission” to access the library? Are public libraries legally obligated to obtain parent permission before a child of a certain age accesses library materials or services? I’m assuming that the library would not be liable if, for example, staff allowed an 11-year-old without a library card to read any book they liked within the walls of the library. Does this apply to a child of any age? (I realize unaccompanied minors will eventually come into play). So, by extension, is granting an 11-year-old a library card without parent consent legally permissible?

2. Is the signature an acknowledgement of responsibility for the library materials on behalf of the child? Many library card applications prompt for this specifically, but according to NYS law, is a parent/guardian responsible for library materials checked out to a minor in their care regardless? (If a 15-year-old minor lost library materials or incurred fines or fees, would their parents still be legally responsible even without giving permission for the card?)

3. COPPA and the collection of PII (for online library card signup). Though not required as a non-profit, our library chooses to comply with this policy, requiring parent/guardian consent of online card signup for children 12 and under. Does this mean that a child aged 11 could still, within legal boundaries, apply for a library card in person without collecting consent?

Answer

When advising on a policy or set of terms for a library or library system to adopt for children’s library cards, I ask for the following information:

  • What are the key objectives of offering a child their own card at your library or library system?
  • Does your library need to enforce fines and/or replacement fees?
  • Is there anything accessible via an “adult” card that your library would not offer access to via a “youth” card?
  • How does your library like to work with parents and guardians?
  • Does the card enable more than borrowing materials from the library? (Is it used for computer access, printing, maker space, etc.?)

I ask these questions because in New York State, children can’t enter enforceable contracts, which makes it hard to collect fines and fees. In addition, a lot of the tomfoolery that can lead to a kid losing library privileges can be more easily addressed if the library is in a position to contact that kid’s parent or guardian, but since library records are confidential, the only way to share the information is with informed consent.

“Informed consent” means that when a person signs up for a card, they are informed of the terms (like their parent being a co-signer who is responsible for their replacement fees), and they expressly consent to them.[1]

With that all out there, let’s tackle the member’s questions, starting with the practice of requiring parents/guardians to sign their child’s agreement for a library card.

QUESTION: Is the signature to allow for “parent permission” to access the library?

ANSWER: No, unless the library’s policy[2] sets things up this way. There is no default federal or state law that expressly denies minors access to a NYSED-registered public library.

QUESTION: Are public libraries legally obligated to obtain parent permission before a child of a certain age accesses library materials or services?

ANSWER: There is no default federal or state law that expressly denies public library access to minors.

CAVEAT: Local laws are often oddly specific (and outdated, and unconstitutional) on things like this, so it is possible a local law could require parental consent to get a library card. Whether such a local law would stand up to a legal test is another matter.[3]

QUESTION: I’m assuming that the library would not be liable if, for example, staff allowed an 11-year-old without a library card to read any book they liked within the walls of the library?

ANSWER: “Liability” is a broad word; it covers both criminal and civil (including financial) liability. But if a library is providing an eleven-year-old with access to library materials that were acquired, cataloged, and accessed per library policy, your assumption is correct: there should be no liability.

QUESTION: Does this apply to a child of any age? (I realize unaccompanied minors will eventually come into play).

ANSWER: Yes, regardless of age, there should be no liability for providing access as allowed by the Education Law and library policy.

That said, the younger the child, the more the law will expect that library policy is being used to not create an active hazard. But as the question alludes to, there is a difference between toddlers running amok in the Rare Books room creating physical havoc and a child of any age accessing a print or online copy of American Lion (a Pulitzer Prize-winning book that discusses genocide, slavery, and violence, because it is about the presidency of Andrew Jackson)[4]. One is a physical hazard and a property risk; the other is a simple exercise of the right to read.

QUESTION: So, by extension, is granting an 11-year-old a library card without parent consent legally permissible?

ANSWER: I wouldn’t say “by extension” because that implies an argument needs to be made to provide library privileges to minors. There is NO requirement for parent/guardian consent for a library card unless the library has included it in their own policy (or an oddball local law requires it, which should probably be challenged).

QUESTION: Is the signature [of a parent] an acknowledgement of responsibility for the library materials on behalf of the child?

ANSWER: In and of itself, the signature is simply proof that the adult signing the card agreement accepts whatever terms are in the agreement. So, as reviewed above, if the library or library system issuing the card has made an adult’s acknowledgement of their responsibility a conditions of their child getting a card, then yes.

Along with that accountability, the signature of the parent, along with the informed consent of the child, can be used to put in place things like:

  • Sharing a child’s library records with a parent (being able to answer the question “What books does my kid have out? I have to help him return them.”)
  • Sharing a child’s fine/replacement fee information with a guardian (being able to answer the question “My granddaughter shoveled the walk yesterday so I would pay for the book she lost. How much is it?”)
  • Disclosing and discussing loss of privileges/access (being able to say “As you know, your child doesn’t have computer privileges right now, because he put gum in the all the ports. We look forward to him being back at the keyboard in six months.”)

Many library card applications prompt for this specifically, but according to NYS law, is a parent/guardian responsible for library materials checked out to a minor in their care regardless?

ANSWER: No, except for in cases of extreme intentional damage, where General Obligations Law 3-112 might create that civil (not criminal) liability.[5]

That said, there could be a rogue local law out there. New York is a big place with many odd local laws on the books.

QUESTION: If a 15-year-old minor lost library materials or incurred fines or fees, would their parents still be legally responsible even without giving permission for the card?

ANSWER: No (and not even if they gave permission for the card, unless they also took accountability for fees); the sole exception to that is if the money was due to damage so extreme that a claim could be made under General Obligations Law 3-112.

QUESTION: COPPA and the collection of PII (for online library card signup). Though not required as a non-profit, our library chooses to comply with this policy, requiring parent/guardian consent of online card signup for children 12 and under. Does this mean that a child aged 11 could still, within legal boundaries, apply for a library card in person without collecting consent?

GRATUITOUS COMMENT: In general, public libraries should avoid complying with laws that they don’t have to comply with. COPPA was adopted to protect minors from predatory online commercial behavior; libraries have a completely different (and more rigorous) set of ethics and laws to guard against that concern. That said, it is essential for a library to require and confirm that any commercial vendor or affiliate being used to provide library services is following COPPA.

AND WITH THAT OUT OF THE WAY, HERE IS THE ANSWER: In New York, there is no law barring any person of any age from getting a library card. This means:

  1. anyone from 0 to “whatever” can get a library card; and
  2. no one can tell them “no” (except on a neutral and rational policy basis, like, “We only give cards to people who live in or work in Buffalo,” or, “We require card holders to be able to be held accountable for fines and fees.”).

That being said, libraries that want to impose conditions on youth and require the agreement of a parent/guardian can do so; the trick is to make sure the reason for the adult’s signature, the conditions it imposes on them, and the rights of the youth involved all line up.

Here are just a few examples of how that can be done:

  • Issuing a “Simple Borrowing Card” that enables borrowing at any age, but due to lack of informed consent and no parent/guardian signature of minors, and perhaps lack of additional information (like address), can’t enable certain things (record sharing, fees, fines). For that reason, borrowing privileges might be limited by number of items, to e-resources, or temporary access.
  • Issuing a “Full Privileges Card” that enables full range of privileges for adults or youth, but for those under 18 (and thus harder to hold to account), only given with the cardholder’s informed consent and parent/guardian’s acceptance of fiscal responsibility. Could be set up so the accountability accepted by the co-signing adult disappears at 18.
  • Issuing a “Supported Borrowing Card” that enables full library privileges but, with informed consent of the cardholder, one or more supportive adults agree to help out with managing returns and other responsibilities that require access to confidential library records. This option could be helpful for cardholders who are bad at returning items,[6] adults who may need extra help for any reason, and youth at libraries that don’t need to have an adult on the hook for fines/fees.

Closing thoughts

This topic elicits much passion and strong feelings from many perspectives.

Many parents, of course, want to be engaged in their child’s selection of media, and being a required part of the library card process is one way for them to play that role. Some libraries might choose to encourage this engagement through policy, while other libraries might simply facilitate it as a by-product of requiring a responsible adult on the card to address concerns related to behavior and borrowing.

At the other end of things, children have a right to read and see the world that by nature is beyond the scope of what many parents/guardians envision, while libraries have an obligation to not discriminate on the basis of age when it comes to library access.[7] So while conditions that enable parental engagement can be imposed and parental engagement can be encouraged, such conditions should never do so in a way that unduly burdens library access.[8]

It is a balancing act, but by having clear reasons for requiring parent/guardian signatures and asking for no more than what is required for those reasons is key.

Thank you for a powerful array of questions.

 

[1] I know I just said people under 18 (in the law, “infants”) cannot sign enforceable contracts. That is broadly true, but informed consent is not about enforcement. It is about making sure someone is aware of their rights, before they consent to sign them away.

[2] Or a weird local law. Always check the local laws!

[3] It would not, so nobody get any bright ideas.

[4] My current reading.

[5] New York’s General Obligations Law 3-112 imposes financial liability on parents and guardians “for damages caused by such infant, where such infant has willfully, maliciously, or unlawfully damaged, defaced or destroyed such public or private property, whether real or personal…” This is also the law that can hold parents responsible for the costs arising from bomb threats made by their kids. Parenting is a risky business.

[6] Right now my 10-year-old is my “library buddy” who makes sure I return my books on time (ish).

[7] Although they can impose reasonable conditions.

[8] Parents and guardians, of course, can limit library access all they want, but the library shouldn’t facilitate that.

Checking Materials Out to Children Without Parent's Permission

Submission Date

Question

Our library is trying to set some parameters around what we require from a patron in order to check out library materials to them. For adults and teens, this is straightforward: we require they have their library card or a form of identification. We are struggling to find a procedure that works for children when they visit the library without a library card, accompanied by someone who is not their parent or legal guardian. This includes kids who visit the library on field trips or with their daycare, or who come with a friend or extended family member.

We want to have a procedure that balances the rights of minors to read freely, with protection for our library against claims that we have checked out materials to children that the parent/guardian believes to be inappropriate.

Some details about our library's policies:
1. We are a public library and do not restrict borrowing privileges by age group. A card holder is permitted to check out anything in the library, regardless of their age.
2. When a child (birth - age 11) gets a library card, their parent or legal guardian must fill out and sign an application that states: “My child has permission to have a library card. I understand that all library collections, including adult material and internet access, are available to children. I accept responsibility for my child's use of the library and any loss incurred.” This application is retained until the cardholder becomes an adult.[1]

We are not primarily concerned with the financial contract between the library and the parent/guardian, but with the potential fallout if a parent were to become angry that their child was permitted to check something out without their library card. If the card is present — say Dad gave it to Grandma when she offered to bring the kids to the library — we feel somewhat assured by having the parent's signature from the original card application. When the card is NOT present, though, we worry that we're opening ourselves up to problems.

We do have a compassionate/creative internal library card that we occasionally use to check out items to folks when our library's policies (e.g. Requiring a card/ID be present) are interfering with the library's ability to fulfill its mission (e.g. Teen has a book report that's due tomorrow and they didn't bring their wallet). We're concerned that if we used that mechanism to check something out to a younger child whose parent is not with them, we could be accused of using our Public Library Agenda to thwart parents' rights. 

Are we overthinking this?

 

[1] Small quibble: Per a law that applies to all public libraries (but not to association libraries) the application should be retained for “3 years after card expires or is inactive.”  So, for children who then get an “adult” card at 18, it should be retained until they are 21.  See this requirement in item 595 of the LGS-1 at https://www.archives.nysed.gov/sites/archives/files/lgs-1-2022.pdf.

Answer

First, I'll answer the easy question: No, you are not overthinking this.

For children fortunate enough to be brought to the public library at a young age, the experience is life-altering. They grow as readers and thinkers. They see themselves as part of a community that shares resources. They start to absorb the values of privacy and information access.

All of this is imbued by the library providing and applying the factors listed in the question: the card policy, the rules around borrowing, and how the child's parents and guardians are brought into the mix.

Which brings us to the crux of the member's question:

We want to have a procedure that balances the rights of minors to read freely, with protection for our library against claims that we have checked out materials to children that the parent/guardian believes to be inappropriate.

In New York, the procedure to ensure the library is protected is simple in one way and complex in another.

It is simple because the recipe for the protection referenced is already in the law.

Just like the chemical formula for one of the molecules in lavender[1] is this:

A chemical structure of lavandulol

Description automatically generated

The “formula” for a library to be protected against an assertion that a minor checked out inappropriate material is:

Of course, this is the protection from claims of criminal liability, and as we have seen, claims of criminal liability aren't the only things libraries and library workers need protection from.

So, let's re-examine the question with the idea that “protection” means from coercive tactics and civil liability,[2] not criminal prosecution.

We want to have a procedure that balances the rights of minors to read freely, with protection for our library against claims that we have checked out materials to children that the parent/guardian believes to be inappropriate.

Other than the practices described in the question (parental acknowledgement at the time a card is obtained, confirmation of age), the tactics to do this are far more complex.

How complex? Well, to go back to the chemistry analogy, the above image was for just one molecule. Here is a full suite of molecules in the essential oils of L. angustifolia (lavender): 

A group of chemical formulas

Description automatically generated

As case law shows, the best protection is a complex array of library practices, all working in alignment to create a beautiful whole.

What is that array?

In short, libraries: keep on doing what you do.

That said, if there is one thing to emphasize that could help guard against negative impacts from a parent displeased with a child's library choice, it would be to add to adjust the language in the parental sign-off from this:

“My child has permission to have a library card. I understand that all library collections, including adult material and internet access, are available to children. I accept responsibility for my child's use of the library and any loss incurred.” This application is retained until the cardholder becomes an adult.

To this:

  1. I acknowledge that my child has applied for a library card and will be responsible for following the conditions of that card, including the Library Code of Conduct and Library User Bill of Rights.
  2. I understand that materials and internet access at the library are not restricted by age, and that my child must be accompanied by a responsible adult while in the library until age 13.[3]
  3. I appreciate that if I have any questions or concerns about my child's use of library services, I can contact [ADDRESS] to discuss them confidentially.
  4. [IF NEEDED] I agree to pay all costs incurred by my child due to loss or damage of borrowed materials.

This change in language can do a few things. First, it changes parent/guardian “permission” to get a library card to “acknowledgement” that the child has agency to apply for access; this subtly (or not-so-subtly) removes the implication that a parent must consent for a child to get a library card.[4]

Second, it links the acknowledgement of collection/internet access to the Code of Conduct and the “unaccompanied minors” policy.

Third, by emphasizing how to address concerns, it provides a gateway for concerns to be brought forward in a proactive way.

And finally, if it is a concern, it puts the parent/guardian on the hook for damage fees.

To bring this all home: why is all of this so important?

First, the answer is: this stuff has always been important.

But second: this answer is being written in October 2024. As I write, the wave of coordinated efforts to limit access to library content continues, and children having access to that content is often cited as a motivation for those efforts.[5] While threats of criminal prosecution have been made, the more common tactics are intimidation[6] and threats to curtail funding. Any adjustment a library can make to reduce the chilling effect of those tactics is worth considering.

Thank you for a great question.

 

[1] I harvested my lavender the day before I wrote this. To get this chemical formula, I checked out the NIH article here: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC8465323/. I learned what my nose had already been telling me: the different varieties in my garden have wildly different ratios of the compounds that make lavender smell so good. 

[2] “Personal injury” in this context would be a claim that the child was injured in some way by exposure to the content; to date, I have found no such claims in case law, but I could see a splashy lawyer trying to make this argument.

[3] Or whatever age is set by the library's “unaccompanied minors” policy.

[4] The question of requiring parental consent to get a library card is a whole other field of lavender.

[5] How much people are “thinking of the children” vs. “trying to control the culture” is not within the scope of this answer, but if you want to take a walk on a sunny day and discuss it, we could put in quite a few miles.

[6] “Intimidation” is a catch-all phrase here for: defamation, harassment, property destruction, retaliation, and service disruption, as well as legal forms of protest (an angry letter to the local paper, a peaceful demonstration, a letter-writing campaign that doesn't defame/threaten).

Responding to post-employment information requests

Submission Date

Question

A former employee who was fired for cause was denied unemployment benefits from DOL and has appealed the decision. Our board has been advised by our outside HR provider to not have contact with the former employee to make sure they don’t provide any support for the appeal or a legal claim. Is that a valid concern?

Answer

Yes, it is a valid concern.

Let’s break it down and explore why.

Once an employee is terminated—whether or not for cause—a former employer should have policies to govern the post-employment relationship.

At a bare minimum, these policies should address:

  • If/how dates of employment are verified
  • If/how references are given
  • How requests for contact information are handled
  • How former employee requests for information and action are addressed

This last item is the territory we’re in right now.

For a host of reasons (respectful relations, consistency and accuracy of information, liability...), requests for information and action[1] from former employees should be handled by one person[2] (even if that person ends up bringing in other people).

For (a positive) example, if a former employee requests a reference five years after leaving employment, the request should go to the designated person, even if the recommendation letter ends up being signed by the board president. This will ensure the request and the recommendation is handled just like any other, which avoids accusations of favoritism or inaccuracy.

For a not-so-positive example, if a former employee is seeking information for a legal claim (workers’ comp, wrongful termination, unemployment), that request should go to the designated person, even if the recommendation letter ends up being signed by the board president. This ensures that the information will be released only after the proper releases are in place (for instance, before a recommendation is sent, it is wise to get a waiver of liability).

The reason this “one stop shop” approach is important is because information from different sources can (in our positive scenario) result in inconsistent information that could hurt the former employee or (in our negative scenario) could result in a trustee or director providing information that could harm the library and even serve as the basis for a legal claim.

Trustees, in particular, should be mindful of their “duty of loyalty” when considering a post-employment request. The “duty of loyalty” means that when taking an action as a trustee (such as answering questions from former employees about their employment), the trustee is keeping in mind the interests of the library. If the library has a policy on post-employment inquiries, the trustee should also keep in mind the “duty of obedience,” which would require them to follow the policy.

This does not mean that library trustees and other leaders shouldn’t elevate the concerns of former workers! It just means that when they do so, it is per policy, and organized in way that doesn’t create undue risk to the library.[3] If the library messed up, that needs to be corrected, but from the legal perspective, how something is done is just as important as it getting done.

So, when there is a post-employment inquiry, follow the policy to respond to it. If there is no policy, adopt one.

Thank you for a great question.

 

[1] Examples of “requests for information and action” by former employees may include: filling out online forms, speaking with a headhunter, helping with a background check, certifying when a “qualifying event” occurred, asking for copies of a job description, asking for copies of a performance evaluation, requesting a tour of the old break room (staff-only space), taking pictures of the bookshelf that fell on them, asking the age of the person who was hired to fill their old position, asking for copies of an incident report, etc.

[2] One person, or at a larger organization, one department (HR).

[3] Examples of a relevant policy that might “elevate a concern” include a library’s conflict of interest policy, whistleblower policy, grievance policy, sexual harassment policy, and data breach policy.

Archival donation acceptance policies in 2024

Submission Date

Question

We have an archive in our Library. We recently got a large donation of research that was used by the donor in the process of researching a book (we have the book in our catalog).

We were hoping the research was primary and original, but upon review, it largely consisted of:

  • PDFs of full books taken from Google Books 
  • PDFs of book excerpts taken from Google Books
  • PDFs of articles with no identifying publication information
  • PDFs/Word Documents with excerpts copied and pasted from websites and articles without attribution

This set off major alarm bells!

To complicate things, we have been so busy running our institution, our policies have not been updated to address concerns about “born digital” donations. And of course, we want to keep up a good relationship with the donor, who is a local author.

Is there a disclaimer or notice we can put on the online repository to protect us from potential copyright lawsuits? Is this a situation where every PDF book and document should be researched first to determine if it is in the public domain or protected by fair use? Should we simply refuse to put any of those documents online due to the risk?

Sincerely,
Discombobulated about Donations

Answer

Dear Discombobulated:

First, thank you from the bottom of my heart for using a “nom de Dear Abby,” so I could reply in kind. While I would love to think that the writing in Ask the Lawyer stands on the shoulders of legal luminaries like John Marshall, Antonin Scalia, and Learned Hand, the truth is, it probably draws more from reading “Dear Abby” and “Ask Ann Landers” in my formative years.

Which is fine, because above all, Ann and Abby strove to provide guidance that was readable, and useful.

So, what is a useful guidance here?

First (and I know you know this), it is critical for your library’s board to update the policies that have left you without guidance on this matter.

While it is of course the work of library employees to actually apply the policies during the difficult work of processing archival donations, it is the responsibility of a governing board to adopt (and as needed, revise) the policies that guide them.

In the case of “born digital” donations, this is particularly critical.

Many authors are now collecting their research and arranging their drafts entirely electronically. This means entire works that once took boxes and boxes to hold might be on a single thumb drive. This change in the medium, however, doesn’t lessen the impact of a writer’s archive, which can show us the sources, the inspiration, and (gloriously) the mess[1] behind the smoothly finished product.

The ability to store seemingly infinite data does not mean a library can simply accept and archive everything it is given. In fact, it means exactly the opposite. This is because an archive is not storage; it is a curated collection of information gathered for a specific purpose.

A good example of this is in the public-facing description of the New York Public Library’s Manuscripts Division,[2] which says in part:

A screenshot of a document

Description automatically generated

While the policies for “born digital” content will generally not be in the public-facing part of an online archive’s website, behind the careful description of the scope of an archive will be the many rules it has for evaluating donated content.

Part of that evaluation will address the concerns the member has posed in their questions: Is the content already “out there?” Is it protected by copyright? Did the author gather the material and further manipulate it in a relevant way (for instance, gathering articles to show who was publishing on a particular topic), or is the information simply gathered for what it offers at face-value?

If the content of a donation fits within the scope of an archive, but largely gathers material that is readily available via other sources, it is unlikely that a policy will support an archive taking the time to re-enter that material. The sole exception would likely be if the unique gathering of material shows something special about the project, in which case it could be archived as one thing, and not a collection of singular objects.

For example: Let’s say I write a best-selling mystery novel mostly set in Grace Church in Utica, New York.[3] To make sure my story is authentic, I make a digital copy of every book and newspaper article I could find about Grace Church, linking events in my novel to events that occurred in real life. When I hit the New York Times bestseller list, I donate my archive (on an external hard drive, for security) to the Utica Public Library.[4]

Upon review, it is very likely the library would conclude that much of the material[5] would be too redundant to separately archive. If, however, I not only made a copy of the material, but then made digital notes on it—showing my thought process as the book was developed—that would be a different thing, and separate cataloging would be warranted.

This would be true even for more recent works that were still protected by copyright, but again, only if the digital copy somehow transformed the work from its state in another catalog.

So, with all that as background, let’s look at the member’s questions:

Is there a disclaimer or notice we can put on the online repository to protect us from potential copyright lawsuits?

Is this a situation where every PDF book and document should be researched first to determine if it is in the public domain or protected by fair use?

Should we simply refuse to put any of those documents online due to the risk?

The answer to this is:

The institution’s policies should be applied to assess if the entire donation is within defined scope of the archives.

The institution’s policies should be applied to assess if any of the materials are generally or easily available in other repositories (whether or not under copyright); if they are, they should not be separately cataloged, because they are redundant.[6]

The institution’s policies should be applied to assess if an array of information, because of its unique combination, is valuable to archive as a whole, even if the separate items are redundant. This means the collection of information could be saved as one item to provide insight into the research or creative process, even if the various items comprising it aren’t separately cataloged and available on an online archive. For copyright concerns, however, it may be better to have such content available for review (in digital format) on-site, only.

I appreciate that the world has (and is) changing rapidly, and many institutions cannot keep up with donations and cataloging, let alone policy review.

This is where the leadership structure of a library, museum, historical society, or archive comes in handy. As we know, at NYSED-chartered institutions, the trustees govern, while the employees manage the institution day-to-day.

Policy starts with governance: ensuring an institution is updating its policies to fit present needs is the responsibility of the board. Applying that policy, once it is established, is the responsibility of employees.

If the policies of an institution aren’t up to evaluating “born digital” donations, it’s time for a policy update. A good method for such an update is an ad hoc committee of board members, employees with relevant expertise, and maybe even a special member like a local scholar or IT specialist, from outside the institution.[7]

To start such a committee, a governing board could pass a resolution such as:

WHEREAS the [institution]’s archives are maintained to gather, catalog, preserve, and provide access to a defined scope of content; and

WHEREAS recent changes in technology require the [institution] to evaluate and refine its approach to digital content (both as donated, and as available via the archives);

BE IT RESOLVED that [NAMES] shall be formed into an ad hoc “Archives Policy Review Committee” for purposes of researching, evaluating, and drafting recommended policy updates to confirm the scope, criteria, manner of evaluation, manner of acceptance, manner of cataloging, methods of preservation, and methods of providing access; and

BE IT FURTHER RESOLVED that such Committee is requested to have a recommended update to current policies by the DATE board meeting; such date to be extended if warranted.

In closing, I have to say to “Discombobulated about Donations”—you are not discombobulated at all! The question shows orderly thinking about how to best use the limited resources of an archive and how to protect your institution from risk.

I’d say you’re “Acing it in the Archives.”

Thank you for a great question.

 

[1] On of my favorite archival images is a draft of the Declaration of Independence edited by Benjamin Franklin, who scratched out Jefferson’s florid “sacred and undeniable” and replaced it with the sturdier “self-evident.” This insight provided by saving this draft is why archives are so important to communities.

[2] As of October 2, 2024, the website of the NYPL Manuscripts Division is here: https://www.nypl.org/about/divisions/manuscripts-division.

[3] The church I was raised in and briefly featured in Episode 21 of the thirtieth season of The Simpsons.

[4] This is clearly a fantasy because as my team will tell you, when I do research, it involves the sacrifice of many trees. I love computers but they are for polishing, not digging.

[5] Likely largely taken from New York Heritage, fultonhistory.com, and (if the rector let me) the archives at Grace Church.

[6] In archives, “redundant” means wasteful of limited resources.

[7] Board committees can have non-board members, so long as they aren’t making decisions for the corporation (as would an executive committee).

Compensation Strategy for Public Libraries

Submission Date

Question

I read the response to the question of whether certain types of libraries must abide by the minimum wage in New York (https://wnylrc.org/raq/minimum-wage-public-library-employees). This includes the mandatory minimum salary paid to professional employees in certain categories who are exempt from overtime, most of whom (in libraries) have master’s degrees. I have to admit, I’m really disturbed that any entity in NYS can get away with paying as low as the federal minimum wage, given what the cost of living has climbed to.

You state that this is legal [for certain libraries] but any library considering this option [should engage an attorney with malpractice insurance to review that library's status under the law and provide a written opinion pertaining only to that library] before embarking on this path. Can you also speak to the potential downsides of choosing to pay less than the NYS minimum wage and minimum exempt salary if you discover you are allowed to do so? Thanks so much.

Answer

Before I answer, let’s confirm: sometimes, base pay (hourly wage or salary) is the only compensation an employee gets, while sometimes, compensation is base pay plus a robust combination of benefits.

For example, a person earning $20 dollars per hour with no benefits might not be better compensated than a person who earns $17 dollars per hour but also gets on-site childcare, sick leave beyond what is required by law, a family health insurance plan, 21 days a year of paid vacation, and tuition assistance for professional development.

How does a public library, with an obligation to properly steward use of taxpayer funds and a fiduciary duty to make decisions based on the best interests of the library, decide what to offer as compensation?

The answer is this: a public library’s approach to compensation should always be based on a library board’s “compensation strategy”—the approach the board takes to using compensation and benefits to achieve the library’s mission.

When developing a compensation strategy, a library board should be thinking:

  • What type of workforce does our library need?
  • What combination of base pay and benefits will attract, retain, and develop that workforce?
  • What key performance indicators show our compensation strategy is working?
  • What external baseline and best practice data should we be gathering to periodically evaluate our compensation strategy?
  • How can we demonstrate the value of these costs to the public?

A public library’s compensation strategy should not be a stand-alone resolution or isolated policy. Signs of it should be seen in budgets, annual reports, committee work, and reports to the community—all signs that a library is thinking about how to nurture its most important resource: people.

Which brings us to the member’s question: “Can you also speak to the potential downsides of choosing to pay less than the NYS minimum wage and minimum exempt salary if you discover you are allowed to do so?”

Yes, I can, and my answer is rooted in what can happen when a public library makes decisions about compensation strategy based on a “how low can we go?” approach, rather than the above-listed factors.

We won’t get into all the downsides, but here are the legal risks posed by paying as little as you can legally get away with:

1. Discrimination claims

When people are not paid what they are demonstrably worth, there is an elevated risk that they will have a credible claim that their underpayment in comparison to others is the result of illegal discrimination.

2. Only otherwise affluent people will be able to work at such a library

If someone can’t make a living wage[1] working at a library, only people who have another source of income will be able to work there. This means working at that library will be off-limits to any person who has been impacted by poverty, creating evidence that could support claims for risk #1, above, and for every other reason on this list.

3. Not aligning with industry standards

Many organizations track employment data[2] to show what the baseline compensation is in different regions, by profession, at different-sized institutions. Having a number that significantly departs from the average can be a factor in every other item on this list, as well as many non-legal concerns such as morale, reputation, and strategic planning.

4. Trouble recruiting and retaining qualified employees

A library is just a room full of books without its employees. If compensation does not attract, retain, and develop a workforce that can achieve the objectives in the strategic plan, budget, or annual report to the community, the board is engineering future failure.[3]

5. Diminished ability to forge relationships with community partners and external funding sources

Other not-for-profit organizations know how to read budgets, and they know the difference between frugality and parsimony.[4] Public libraries who are demonstrably choosing to reduce investment in their workforce impede their own ability to partner with mission-aligned groups and undercut their ability to attract external funding. After all, if an organization doesn’t believe in itself, why should an external partner invest in it?

6. Ongoing impacts

Once a public institution establishes a willingness to reduce itself to the bare minimum, even its allies and advocates will have a tough time arguing for more.

I say this, knowing (and having seen firsthand) that library boards face ENORMOUS pressures to cut budgets whenever they can. And—from the perspective of good governance—they should.

The trick is to be ready to show that a budget that invests in a strong workforce is not wasteful, imprudent, or foolish. By developing and continually re-evaluating its compensation strategy, a board is ready to take on all those who would argue they should pay as little as possible. By giving in to pressure and simply slashing compensation, a board is creating an ongoing cycle of austerity.

7. Increased likelihood of employees needing a union to ensure positive working conditions

Unions are powerful mechanisms for employees to advocate for what they need and SHOULD NEVER BE RESISTED.[5] It is nice if they are brought into the equation as the result of workers feeling empowered, rather than feeling misused.

8. Trouble meeting regulatory requirements

A public library must meet certain regulatory requirements; these requirements vary from library to library. A compensation strategy should be based in part on meeting these requirements, as well as other mission and strategic plan-related objectives set by the board.

Below this answer, we are putting a simple template for developing a compensation strategy. Using this, a library can start to resist external (and internal) pressures to simply slash-and-burn the budget—including pressure to offer minimal wages.

Thank you for an excellent question.

 

 

NAME Library Workforce Compensation Strategy Policy

 

Version: TEMPLATE FOR A NON-ASSOCIATION, NON-UNION LIBRARY

 

 

Responsibility for compliance: Board, Personnel Committee

 

Reviewed: Annually, in MONTH, as part of budget development

 

Policy

It is the policy of the NAME Library to use a strategic approach to compensation and benefits to achieve the library’s mission.

In developing this Compensation Strategy, the board will continually address:

  • What type of workforce does our library need?
  • What combination of base pay and benefits will attract, retain, and develop that workforce?
  • What key performance indicators show our compensation strategy is working?
  • What external baseline and best practice data should we be gathering to periodically evaluate our compensation strategy?
  • How can we demonstrate the value of these costs to the public?

The board and director will use the below worksheet to answer these questions on a no-less-than-annual basis. This work will be used as the board develops the annual budget, as the board conducts the annual evaluation of the director, as the director conducts the annual evaluation of staff, and as the board and director work to affirm a staffing plan that meets the current and contemplated needs of the library.

WORKSHEET

1. What are our minimum regulatory requirements for operation?

INSERT

2. What are our additional operational commitments?

INSERT

3. What workforce does our library need to meet these requirements and commitments?

Sample answer:

[NOTE: Really, this is just a sample! Every library should have a different answer here, and the person who best knows the answer is the director, informed by the strategic vision of the board. Some libraries need more part-time folks. Others want mostly full-time. Some want new people and new ideas and community connections, while others want to emphasize long-term folks committed to innovation. Make sure your answers meet the need of YOUR library!]

Sample answer:

The Library needs a workforce that meets not only basic requirements but is quantifiably skilled in the “soft skills” of patron service, outreach, and community partnerships.

The Library needs a workforce that is stable, with full-time employees incentivized to stay long-term.

The Library needs a workforce that is able to provide consistent service without too much backup or assistance from part-time or temp workers.

4. What combination of base pay and benefits will attract, retain, and develop that workforce?

Sample answer:

[NOTE: Really, this is just a sample! Every library should have a different answer here, and the person who best knows the answer is the director, informed by the strategic vision of the board. Some libraries will want to take a completely different approach than what is below. Make sure your answers meet the need of YOUR library!]

Because the Library wants to attract a highly qualified applicant pool, it generally starts its pay range at the baseline established by ALA-APA for our type/size/region of library. The top of the range is then set by our reliance on the attributes of the position, with the baseline being increased by up to twenty percent if merited by the position’s impact on Key Performance Indicators.

Because the Library wants to incentivize long-term employment and continuous improvement, it uses a system of percentage increases and merit pay, in addition to cost-of-living adjustments, to effect raises.

Because the Library wants to remain competitive with private organizations that must offer paid sick leave, we offer twelve days of paid sick leave a year to full-time employees, with the amount pro-rated for part-time employees.

Because the Library wants to remain competitive with private organizations that must offer paid family medical leave, we have opted in to New York State’s Paid Family Medical Leave and pay the premiums.

Because the Library wants to remain competitive with governmental organizations offering retirement pensions, we offer and contribute a set percentage to New York State Retirement for all employees.

Because the Library wants to remain competitive with all organizations and incentivize the retention of employees, we offer a baseline of 10 days of paid vacation per year to full-time employees, with one day added for each year of employment.

Because the Library wants to incentivize retention, we offer a bonus at every 5-year mark.

Because the Library wants to ensure that our incentives to remain are earned, we are rigorous about annual performance reviews.

5. What key performance indicators (“KPI’s”) show our compensation strategy is working?

Sample answer:

KPI #1: Community input shows that our community wants more in-person events for children and seniors. We will ensure that employee competencies/experience and duties related to such programming are part of our workforce recruitment and that the experience of those workers is adding value to programs.

>KPI #2: Community input shows that our reference services and assistance identifying reliable sources of information are very valuable. We will ensure employee competencies/experience and duties related to such services are part of our workforce recruitment and track (without patron identification) instances related to this service.

 

KPI #3: Our strategic plan commits us to building a new library building by 2027. We will ensure that attracting candidates with experience related to moving a library is part of our ongoing workforce recruitment, so that we have those competencies when needed.

6. What external baseline and best practice data should we be gathering to periodically evaluate our compensation strategy?

Sample answer: The Library will use data from ALA-APA to show what similar organizations in similar regions are paying for qualified library professionals and workers, and the Library will identify reasons to justify significant deviations.

When there is a significant deviation showing we pay at least 10% more than baseline, we will identify why this deviation from baseline is important to our obligations, objectives and/or community. When there is a deviation below baseline, we will identify and confirm why this isn’t important to our obligations, objectives and/or community.

7. How can we demonstrate the value of these costs to the public?

Sample answer: The Library will track our programs and KPI’s and highlight the work of our workforce in the annual report to the community, noting when a worker’s experience and commitment has helped make an initiative successful.

 

 

[1] MIT’s “Living Wage Calculator” offers living wage statistics for each county and several metropolitan areas in New York State: https://livingwage.mit.edu/states/36/locations

[2] For librarians, the ALA-APA maintains a “Salary Survey Database”

[3] Engineering failure is the opposite of what public library boards are legally obligated to do.

[4] I thought about swapping “being unwisely cheap” for “parsimony” but this is for a library audience, so we’ll go with the fancy word.

[5] Also: resisting them is illegal. Don’t do that! For more information on how to ensure your library board isn’t impeding protected activity (a.k.a. “union busting”), visit https://www.nlrb.gov/about-nlrb/rights-we-protect/the-law/interfering-with-employee-rights-section-7-8a1