Skip to Main Content
The University of Massachusetts Amherst

Intellectual Freedom

Privacy and confidentiality in education and libraries protects intellectual freedom by ensuring that individuals can learn and research without surveillance or repercussions. The privacy of academic records is protected by Family Educational Rights and Privacy Act (FERPA), and states may have additional regulations (such as Massachusetts). In addition, libraries may keep their patrons' information confidential following state law or their institutional policies.

Privacy and confidentiality in education

The FBI has not been here [watch very closely for removal of this sign]

Warrant canary image by Jessamyn West is licensed under CC BY 4.0


 

Article VII of the American Library Association's Library Bill of Rights:

VII. All people, regardless of origin, age, background, or views, possess a right to privacy and confidentiality in their library use. Libraries should advocate for, educate about, and protect people’s privacy, safeguarding all library use data, including personally identifiable information.

For more information, see ALA's "Privacy: An Interpretation of the Library Bill of Rights."


 

This information describes what data is retained when using the Libraries' online catalogs and resources. It is provided so that patrons -- students, workers, and community members -- can make informed decisions about how they use the Libraries. Library staff are to follow the University's "Responding to Law Enforcement or Government Agents" when presented with demands for data. [last updated Feb 7, 2025]

When I... Data generated Retained for this long Controlled by Can I delete it?
Search the library catalog.

Logged in: search and click action info; can be reassociated to your PII by a common key.

Not logged in: none.

Logged in: 35 days.

Not logged in: no data.

EBSCO Yes, by deleting your account, which has other ramifications.
Save searches or records in my account.

The saved catalog record or search; can be reassociated to your PII by a common key.

Other actions performed  while logged in.

Saved record: until you delete it.

Other actions while logged in: 35 days.

EBSCO Yes, by deleting your account, which has other ramifications.
Access articles, journals, and databases through the library.

On campus: none.

Off campus: IP address, NetID, timestamp, URL accessed.

1 week The library, on local servers.

No.

Data is automatically deleted after 1 week.

Access articles, journals, and databases through publisher platforms or the open web. Unknown. See that site's privacy policy. Unknown. See that site's privacy policy. The publisher or site from which it was accessed. Possibly third parties.  Unknown. The site may have record deletion tools in line with GDPR.
Borrow or request a print book or other physical item from the stacks.

Name, contact info, other UMass PII record data.

Catalog record, times checked out & returned, fines & fees if applicable.

5 years. The library is working on anonymizing this data. The library, on EBSCO's AWS servers No.
Request a book or article through interlibrary loan (ILL).

Name, contact info, other UMass PII record data.

Title & other info about the requested item.

Indefinitely. The library is working on changing this. The library, on local servers. No.