The Vendor Wants Title-Level Checkout Data
Lakeview K–8 (540 students) has no library-specific records procedure. In September the district signed a three-year contract with a reading-analytics vendor whose dashboard shows teachers "minutes read." Onboarding requires you to enable an API that would push every student's checkout records - title, date, and reading level - to the vendor nightly. The assistant superintendent has already initialed the form and forwarded it to you saying "please set this up this week." In the same week, a parent emails asking for her son's complete borrowing history "to see what he's been reading," and a seventh-grade health teacher asks for a list of which students checked out the puberty and reproduction titles so she can "be sensitive" during the unit. Your district has a general data-privacy policy and your state has a library-records confidentiality statute, but neither has ever been applied to circulation data. You have until Friday.
1. How do you handle the vendor integration request?
Read the worked answer
The form is initialed, but the implementation decision is still mine, and "this week" is not a legal deadline. Three questions: what is the educational purpose, what is the minimum data needed, and who is the vendor accountable to?
Purpose: "minutes read" does not require title-level records. Reading level is a derived, inferential label, and titles about family structure, religion, sexuality, or health are precisely the records that can harm a student if they leak, are breached, or are subpoenaed. The defensible design is aggregate or de-identified: counts per class, or student-level minutes drawn from the vendor's own platform if students read there - not our circulation log.
I would also read the contract for a data-processing agreement, retention limits, breach notification, and a prohibition on secondary use or sale. Analytics vendors often reserve the right to use data for product improvement or model training, and a signature on an onboarding form does not cure missing clauses.
My response to the assistant superintendent: "I can have this running by Friday in a form that gives teachers what they need without exporting title-level records; here is the one-page comparison, and here is what I need from legal if you want the full feed." Then I would get the answer in writing. I would neither silently comply nor refuse outright - I would offer the narrower version and document the risk.
2. How do you respond to the parent's request and to the teacher's request, and why are they not the same?
Read the worked answer
They look similar and they are not. The parent is asking for her own minor child's record; the teacher is asking for other people's children's records in order to plan instruction.
Parent: federal law gives parents the right to inspect their child's education records, and whether library circulation counts as an education record is genuinely contested - many states' library confidentiality statutes shield patron records, and many districts treat circulation as confidential. The defensible path is not to decide alone. I would consult district counsel, respond within the policy's timeline, and in most cases provide the record to the parent for her own child while explaining what it does and does not show: a checkout is not proof of reading, and a returned book may have been read by a sibling. What I would not do is hand over a lifetime reading history without counsel, because state law may prohibit exactly that.
Teacher: even where a teacher has a legitimate educational interest, "which students checked out the puberty books" is not the minimum necessary data. She needs a sensitive lesson, not a roster. I would say: "I can't give you names; here is what I can do - a note to families about the unit, an alternate text, and a heads-up that some students may have read ahead." If she has a concern about a specific student, that belongs in a conversation with the counselor, not in the circulation log.
3. What records procedure would you draft, and how would you assess whether staff actually understand it?
Read the worked answer
The absence of a procedure is the real finding, and it will outlast this week. I would draft a two-page document covering: what circulation data is and how it is classified; who may access it and for what purposes; how long it is retained; how requests are logged; who signs off; and how staff respond in the moment without improvising.
My first technical action would be to configure the library system to purge transaction history at the end of each school year and retain only current loans and overdues. Many systems keep lifetime borrowing history by default, so the most important privacy decision is a checkbox most people never open.
To assess whether staff understand it, I would run a short scenario check at a staff meeting with three written answers: a parent calls wanting to know what her daughter has borrowed; a teacher wants a list of who took out a health book; a vendor wants an API feed. Written responses tell me far more than a signed acknowledgment form, and they surface the misconceptions I can then address. I would repeat it annually and after any turnover in the front office, because the main office usually fields these calls before I ever hear about them.