{"id":565,"date":"2018-05-02T14:28:24","date_gmt":"2018-05-02T12:28:24","guid":{"rendered":"http:\/\/blogs.ifla.org\/lpa\/?p=565"},"modified":"2018-05-02T14:44:15","modified_gmt":"2018-05-02T12:44:15","slug":"mine-not-mined-libraries-and-data-ownership","status":"publish","type":"post","link":"https:\/\/blogs.ifla.org\/lpa\/2018\/05\/02\/mine-not-mined-libraries-and-data-ownership\/","title":{"rendered":"Mine, not Mined? Libraries and Data Ownership"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-566 alignleft\" src=\"https:\/\/blogs.ifla.org\/lpa\/files\/2018\/05\/Choose-Privacy-Week-300x169.png\" alt=\"\" width=\"470\" height=\"265\" srcset=\"https:\/\/blogs.ifla.org\/lpa\/files\/2018\/05\/Choose-Privacy-Week-300x169.png 300w, https:\/\/blogs.ifla.org\/lpa\/files\/2018\/05\/Choose-Privacy-Week-768x434.png 768w, https:\/\/blogs.ifla.org\/lpa\/files\/2018\/05\/Choose-Privacy-Week.png 923w\" sizes=\"auto, (max-width: 470px) 100vw, 470px\" \/><\/p>\n<p>Between the <a href=\"https:\/\/blogs.ifla.org\/lpa\/2018\/03\/22\/responding-to-cambridge-analytica-the-role-of-libraries\/\">Cambridge Analytica<\/a> scandal and the entry into force of the <a href=\"https:\/\/www.ifla.org\/node\/36104\">General Data Protection Regulation<\/a> on 25 May, it hardly seems necessary to have a reminder of the importance of privacy. Yet this week is <a href=\"https:\/\/chooseprivacyweek.org\/\">Choose Privacy Week<\/a>, an initiative run by the American Library Association. It\u2019s great opportunity to go beyond scare stories and (complex) legislation, and look at practical steps that individuals can take to keep their private lives private.<\/p>\n<p>25 May will bring a particular new way of doing this, at least theoretically. The GDPR creates the concept of \u2018Data Ownership\u2019 \u2013 that data about you is your property, and so you should be able to decide what to do with it.<\/p>\n<p>Conceptually, the idea is attractive. If Facebook has gathered information about your preferences and habits, you should be able to see it, ask Facebook to delete it, and take it to other social networks if you want. The goal \u2013 give the individual the power to decide who does what with their data, and ensure that they are getting the best deal for it.<\/p>\n<p>This is already what is proposed in some places with data about electricity or water consumption. Meanwhile, some of the biggest companies have already moved to give people the possibility to look at the data collected about them, without necessarily allowing them to delete or move it (the company retains ownership). This at least allows for stronger awareness of why they are seeing what they do online.<\/p>\n<p>The idea is contested.<\/p>\n<p>Extending property rights to data does represent a very liberal approach, and assumes that there is both a choice (i.e. opting out of social networks), and that people are <a href=\"https:\/\/www.ft.com\/content\/a00ecf9e-2d03-11e8-a34a-7e7563b0b0f4\">aware, skilled, and motivated<\/a> to use it. More on this below.<\/p>\n<p>Others have suggested that personal data should be <a href=\"https:\/\/scinfolex.com\/2018\/02\/05\/pour-une-protection-sociale-des-donnees-personnelles\/\">protected along the same lines<\/a> as work, given that employees may well find themselves in a position of weakness compared to an employer. It is clear that, even with the idea of data ownership, the activities of those making use of personal data will need to be policed, at least in a proportionate manner.<\/p>\n<p>So how will this play out for libraries?<\/p>\n<h2><strong>The Library Angle<\/strong><\/h2>\n<p>The concept of data ownership can affect libraries in terms of the data they hold about users, personal data in the works in their collections, personal data on the wider Internet, and their broader role in helping users navigate the information environment.<\/p>\n<ul>\n<li><strong>Library User Data<\/strong>: libraries hold data about their users, primarily in the form of lending\/use records and any information associated with their library card or profile. Much of this can be personal \u2013 for example the case of a reader from a minority who borrows books on subjects of particular interest to them.<\/li>\n<\/ul>\n<p>At least for those libraries with EU citizens as users, <strong>there will be the obligation to deal with requests to share or delete data<\/strong>. Many libraries limit risks here by deleting information after a short period of time. This is also the case in the US, where minimising data retention makes it easier to resist requests from security agencies. In those libraries that keep data for longer \u2013 for example because the works handled are rare or of a high value \u2013 there may be a case for keeping information for practical purposes.<\/p>\n<ul>\n<li><strong>In the Stacks<\/strong>: many works in library collections \u2013 not least biographies \u2013 by their nature contain what is now classed as sensitive personal data. Libraries are, of course, not in the business of destroying reputations or violating privacy thoughtlessly \u2013 codes of ethics and good sense play an important role in whether access is given. However, there would be concern when decisions about acquisitions and collections cannot be made freely.<\/li>\n<\/ul>\n<p>Fortunately, there is an <a href=\"https:\/\/scinfolex.com\/2018\/04\/13\/du-droit-a-la-memoire-comme-manifestation-dun-droit-social-des-donnees\/\">exception for archiving<\/a> in the European text (i.e. a library has a defence when someone objects to a book about them being added to a collection, or requests to delete information). However, this is not mandatory for all EU Member States, and there is a risk that <strong>in some places, data ownership will mean libraries have less control over the works in their own collections<\/strong>.<\/p>\n<ul>\n<li><strong>A Right to Remember?<\/strong>: there is of course already one way that people can \u2018take control\u2019 of their data, even if in a limited way \u2013 the \u2018right to be forgotten\u2019. This allows people to ask for certain web-pages and articles to be removed from the results of searches for their name. IFLA itself has <a href=\"https:\/\/www.ifla.org\/node\/10273\">underlined<\/a> that there are circumstances where such a provision can make sense, in particular if the information found in this way is unfair, untrue, or irrelevant.<\/li>\n<\/ul>\n<p>The challenge, as already seen in a number of cases, is when this is used to cover up relevant facts (for example, the crimes of someone bidding to be a company director), or to limit the shelf-life of news and restrict the freedom of journalists to report. In its statement, IFLA underlined that <strong>decisions on delisting should be taken carefully, on a case-by-case basis, and with due regard to the importance of access to information<\/strong>.<\/p>\n<ul>\n<li><strong>Many Careful Owners<\/strong>: finally, libraries have an expertise in information management, and so arguably a responsibility to help others develop this themselves. Clearly it isn\u2019t reasonable to expect all librarians to understand in depth how data analytics work and what they can mean. But there are great resources available (such as those produced by the <a href=\"https:\/\/dataprivacyproject.org\/\">Data Privacy Project<\/a> in the US) while go some way towards doing this.<\/li>\n<\/ul>\n<p>Libraries are also already looking to deal with the issue, highlighted above, of ensuring that people are aware of the choices they have, and are motivated to use them. Knowing about the existence of encrypted messaging services, greater care in choosing privacy settings, and simply better data hygiene can all help. And there are great tools such as the <a href=\"https:\/\/tacticaltech.org\/news\/data-detox-kit\/\">Data Detox Kit<\/a> already available.<\/p>\n<p>Of course data \u2018ownership\u2019 takes this to the next level. Given libraries\u2019 existing engagement, there is a logical role for them in helping people exercise their new rights. Doubtless, in the coming years, it will be possible to share some great ideas.<\/p>\n<p>Nonetheless, \u2018data ownership\u2019 in itself should not be seen as an excuse to leave all of the responsibility to individuals and those that serve them. The right privacy legislation \u2013 set and implemented nationally, regionally and globally \u2013 still has an essential role to play.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Between the Cambridge Analytica scandal and the entry into force of the General Data Protection Regulation on 25 May, it hardly seems necessary to have a reminder of the importance of privacy. Yet this week is Choose Privacy Week, an initiative run by the American Library Association. It\u2019s great opportunity to go beyond scare stories [&hellip;]<\/p>\n","protected":false},"author":810,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-565","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/blogs.ifla.org\/lpa\/wp-json\/wp\/v2\/posts\/565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.ifla.org\/lpa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.ifla.org\/lpa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.ifla.org\/lpa\/wp-json\/wp\/v2\/users\/810"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.ifla.org\/lpa\/wp-json\/wp\/v2\/comments?post=565"}],"version-history":[{"count":4,"href":"https:\/\/blogs.ifla.org\/lpa\/wp-json\/wp\/v2\/posts\/565\/revisions"}],"predecessor-version":[{"id":570,"href":"https:\/\/blogs.ifla.org\/lpa\/wp-json\/wp\/v2\/posts\/565\/revisions\/570"}],"wp:attachment":[{"href":"https:\/\/blogs.ifla.org\/lpa\/wp-json\/wp\/v2\/media?parent=565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.ifla.org\/lpa\/wp-json\/wp\/v2\/categories?post=565"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.ifla.org\/lpa\/wp-json\/wp\/v2\/tags?post=565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}