Skip to main content

Recently Asked Questions

To search the RAQ database, use the search box at the top of the page. Recordings of Ask the Lawyer webinars and more information can be be found on the Resources Page.

Submit a Question to Ask the Lawyer About the Service

Displaying 6 - 7 of 7
Question Submission Date
Patron Confidentiality in School Libraries

Is a parent or guardian allowed to access the titles of books that that their child(ren) have checked out from the school library?

Are school administrators allowed to access the titles of materials a student checked out?

Are school safety officers and Student Resource Officers (“SRO’s”) allowed to access the titles of materials a student checked out?

FERPA and NYS Privacy Laws

We have a question that relates to the intersection of New York state level library privacy laws (https://www.nysenate.gov/legislation/laws/CVP/4509) and FERPA. Our campus has a newish system that is attempting to correlate student actions and activities with academic success and retention. As such, it could be helpful to include things like visits to the writing center, appointments with academic advisors, and also library activities, such as whether a class came in for a library information literacy session or whether a student made an appointment for a library one-on-one consultation. FERPA lets institutions share academically related information within certain bounds.

We are wondering what the privacy balance is here given that the information would stay in-institution, but not in-library. Here's what we are considering doing:

1) Noting in the system which classes had a library session(s). Within the system, that would identify individual students within those classes.
2) putting an opt-in statement on our one-on-one research appointment form and if the student consents, then providing to system the student name, appointment date/time, and course that the help was for (but not anything about the specific content of the appointment).

Have we crossed any lines here? Do we even need the opt-in statement? Is this something clear or fuzzy/grey? What should we be considering that we haven't thought of? Thanks.