Re: patriot act and counting hits via IP

[David Goodman <dgoodman@Princeton.EDU>]

Personally, in spite of such clauses--and the one cited seems a very good
one--, I see no way of preventing the government from getting to the
individual ip use data held by the supplier, especially if on a US-based
server.  As for data held by the library, I suggest the same method that
has long been used for circulation data: do not hold it after the
immediate need has passed.  If this means not keeping logs beyond the time
needed for initial de-bugging and tracing license violations, then do not
keep the logs. I regret the need for this, as the analysis of use data on
an individual level would have much interest if privacy could be fully
protected. But in the current environment I do not think we can
effectively protect privacy if we maintain the data, and the principle of
intellectual freedom is more important to me than our potential research.

Ann Okerson wrote:
>
> Date: Wed, 12 Jun 2002 11:21:33 -0500
> From: Patricia Ann Loghry <Patricia.A.Loghry.1@nd.edu>
> Subject: patriot act and counting hits via IP
>
> I have a question for the group.  What are you all discussing/implementing
> in connection with the Patriot Act and counting article hits via IP?  Can
> your IT Dept. tie any of your IPs back to an individual or small group of
> people?  Have you seen any new license wording that may deal with this
> particular confidentiality issue?  Our template has the following which
> seems to cover it, but am curious if others are doing anything else?
>
> "Confidentiality of User Data.  Licensor agrees to maintain the
> confidentiality of any data relating to the usage of the Licensed
> Materials by Licensee and its Authorized Users.  Licensee agrees to
> maintain the confidentiality of any data relating to the usage of the
> Licensed Materials by individual Authorized Users.  Such data may be used
> solely for purposes directly related to the Licensed Materials and my only
> be provided to third parties in aggregate form.  Raw usage data, including
> but not limited to information relating to the identity of specific users
> and/or uses, shall not be provided to any third party.
>
> Pat Loghry
> email Ploghry@nd.edu