This policy describes how the OHSU Library uses the personally identifiable information we collect and the steps we take to respect and protect your privacy.   

The OHSU Library abides by state and federal law and complies with OHSU’s Information Privacy and Security policies and Notice of Privacy Practices, the Health Insurance Portability and Accountability Act (HIPAA), the Family Educational Rights and Privacy Act (FERPA), and all other relevant legal requirements. The Library follows best practices to ensure each library user's privacy and confidentiality are respected as they seek information, consult with librarians and library staff, and use library resources and services. 

To provide, evaluate, and improve library services and access to resources, the OHSU Library collects personally identifiable information (PII) from and about individuals and their interactions with our systems. PII is never used by the OHSU Library for commercial purposes, and will not be revealed to any third party except by such process, order, or subpoena authorized by law and only after clearance from the OHSU Legal Department according to national, state, and local laws and OHSU policies. 

In order to provide services such as access to articles, books, and historical collections and reference consultations, the OHSU Library collects personally identifiable information (PII) from and about individuals, and their interactions with our systems. PII is confidential and access is used only by Library staff who need the information to provide or evaluate services, and to other OHSU units which may be consulted by the Library in troubleshooting problems, analyzing the use of resources, and improving services.  

OHSU Library uses many third-party vendors to facilitate and provide access to electronic resources and websites. When using our electronic resources, you are subject to the privacy policy of those external sites.   

Policy reviewed and approved by OHSU Library leadership
Last reviewed: 20 May 2025