Showing posts with label access to records. Show all posts
Showing posts with label access to records. Show all posts

Monday, August 24, 2015

SAA 2015: Cleveland Digital Public Library

Main lobby, Cleveland Public Library, East 3rd Street and Superior Avenue, Cleveland, Ohio, 2015-08-22. This is what a library should look like.
The annual meeting of the Society of American Archivists ended early Saturday afternoon. I then visited the main branch of the Cleveland Public Library. I fell in love with this library as an undergraduate, and I was pleased to see that the original building, a Beaux Arts beauty, has received some much needed care and that a sparkling 21st century addition now sits immediately to the east of the library's reading garden.

I was particularly pleased to discover that earlier this year, the library launched the Cleveland Digital Public Library, which supports digitization of historically significant materials owned by the Cleveland Public Library, other cultural heritage institutions, and organizations and individuals in the Cleveland area. Cleveland was one of four large public libraries that received Library Services Technology Act and Ohio Public Library Information Network funding that supported the purchase of high-resolution scanning equipment and storage, and Cleveland's program is unique in that it allows community members to use its scanning equipment and to add copies of the resulting image files to the library's permanent digital collections.

I know that the Cleveland Public Library isn't the first institution to create and maintain digital images of manuscript and archival materials that remain in the hands of their creators, but it may be unique in that it puts community members in charge of determining whether their materials should be added to the library's collections and enables them to create and donate copies of their materials at their convenience. Almost all of the other "scan and add" projects with which I'm familiar have sought to collect copies of materials that focused on a given event (e.g., the Civil War) and make their scanning services available to community members for only a few hours or a few days at a time.

I imagine that, in at least a few instances, the community-created images added to the Cleveland Public Digital Library's collections will strike archivists, librarians, and other members of the community as less than preservation-worthy. However, judging from the videos embedded in the Cleveland Digital Public Library's web page, this program will help to ensure that some fascinating Cleveland lives and stories are preserved and made broadly accessible. It pleases me deeply that the Cleveland Public Library is taking a 21st century approach to collecting and facilitating access to the city's historical record.

Sunday, August 23, 2015

SAA 2015: thinking about access

Glass globe (1925) based upon a drawing by Leonardo Da Vinci, main branch of the Cleveland Public Library, East 3rd Street and Superior Avenue, Cleveland, Ohio, 2015-08-15.
The 2015 meeting of the Society of American Archivists ended early yesterday afternoon, and I spent the remainder of the day thinking about . . . well, a lot of things, but mainly about the conference and my hometown.

By my count, there were five sessions -- four listed in the preliminary program and a fifth "pop-up" session that came together shortly before the meeting began -- that focused on making born-digital records accessible to end users. I heard a little grumbling about the weight given to this particular topic and to electronic records generally, and I also heard some griping about the timidity and complexity of the access solutions and systems that were discussed. As I walked through the Cleveland Public Library this afternoon and visited various suburban bookstores this evening, the subject of access to records kept popping into my mind.

I agree that in some instances, we allow fear -- of embarrassment, of reprisals, of vague and undefined consequences -- to play an inordinately large role in shaping our access policies and procedures. I also agree that it's quite easy to develop online access mechanisms that force users to jump through additional hoops instead of providing a seamless entree into one's digital holdings. However, it's important to remember that our hangups regarding access aren't merely the product of fear.

In some instances, access restrictions are the result of negotiated agreements with donors. In other words, we've made a promise that we need to keep -- in part because it demonstrates our trustworthiness and in part because -- generally -- it's the right thing to do. One can argue that the terms embedded in a given agreement are excessive, needlessly complex, or downright unreasonable, but I don't think that any archivist would assert that we should treat donor agreements lightly.

In other instances, restrictions are imposed by law. Is every law that might bear upon access to records well written, easy to enforce, and in alignment with archival principles. No, no, a thousand times no. However, archivists generally seek to operate within the bounds established by law and those working in government repositories may have a legal as well as an ethical obligation to uphold the law.

Moreover, upholding laws relating to records access is, in some instances, a matter of social justice, particularly when public records are involved. Over the course of my career, I have encountered records that a) concern individuals who are quite likely still alive and b) contain detailed documentation of injuries and illnesses, identify victims of sexual assault, document psychiatric histories, or plumb the family histories of minors who came into contact with the criminal justice or social welfare systems. Releasing such records might very well do these individuals substantial psychological harm. If the records document abuses that these individuals suffered while being "served" by government-operated facilities and programs, their improper disclosure may rightly be regarded as perpetuation of that abuse.

On one of the sessions (I forget which one), one of the panelists (again, I forget which one) said that she thought it would be a good idea if archivists focused less on the harms that inadvertent disclosure might cause ill-defined third parties and more on advocating for the interests of end users. Keeping in mind the perspective of end users is absolutely appropriate, but we need to remember that some of the people documented in our holdings have claims that may be even more compelling.

Saturday, August 22, 2015

SAA 2015: making born-digital records accessible


Terminal Tower, Public Square, Cleveland, Ohio, 2015-08-21. Until 1991, Terminal Tower was the tallest building in the city of Cleveland and the state of Ohio. I have loved this building as long as I can remember.
SAA 2015 is in full swing. Today, I sat in on two sessions -- Arrangement and Description and Access for Digital Archives (session 401) and Out of the Frying Pan and Into the Reading Room (session 507) -- that focused on on providing access to born-digital materials. I was tardy in arriving to the first and had to leave the second in order to travel to an offsite meeting, so what follows is a partial listing of things I found interesting or useful.
  • One repository is providing access to a born-digital body of materials that is subject to varying copyright and donor restrictions by loading copies of the files onto a laptop that is not connected to any network and has disabled USB ports. This approach isn't perfect, but archivists shouldn't wait for perfection to start making their holdings accessible. (Moreover, as another archivist pointed out, this approach requires minimal IT support.) 
  • No two collections are the same, and processing is always time-consuming. Another repository assesses each collection of born-digital materials for quality of data, authenticity of data, complexity of the access restrictions associated with copyright and donor stipulations, and anticipated level of use. Records that contain high quality and authentic data, lack complicated access restrictions, and will likely receive high use receive more intensive processing than those that don't meet these criteria. 
  •  The amount of processing work we do will likely vary. One institution has some born-digital collections that consist of flat groupings of items and some collections that consist of files arranged in directory structures. In other instances, collections are mixtures of analog and digital items, and the archives wants the arrangement of the digital materials to correspond to that of the analog. 
  •  We don't yet have a firm sense of what our users want. Some of our users are comfortable with doing keyword or other types of searches, and others are accustomed to box-and-folder hierarchies. We may discover that we need to try to meet the needs of both groups. 
  • Access solutions are varied, constantly changing, and have a way of emerging in response to pressing user requests. We need to remain flexible and mindful of the fact that solutions that work at one institution might not work at another. 
  • We need to publicize our born-digital holdings, and we need to make sure that colleagues who do reference work are comfortable working with these materials and highlight their existence to researchers when appropriate.
The question of making restricted materials available online also came up, and one presenter recommended making use of the redaction functionality being incorporated into BitCurator and informing end users of their responsibilities regarding inappropriate disclosure of information that may be subject to various restrictions. The latter approach was also explored quite extensively in a Thursday afternoon pop-up session that centered on issues raised by recent events at the University of Oregon, and the discussion included making access contingent upon entering into formal, online agreements.

I find this an intriguing approach, but most most government archives will likely be very slow to embrace it. Some state open records laws specify that records creators and archives cannot impose limitations on the use of information that is disclosed in response to freedom of information requests; if a record contains restricted information, the creating agency or the archivist must redact it prior to disclosing it. Moreover, governments tend to be risk-averse -- sometimes excessively, and sometimes with good reason. However, I can envision some scenarios in which government archives might well adopt this approach; using a click-through agreement to highlight the presence of records potentially covered by copyright isn't quite the same thing as hoping a researcher will abide by an agreement prohibiting disclosure of information found within psychiatric case files.

Finally, in response to a question concerning whether we should embed all of the metadata we're creating as we work with digital materials into our finding aids, one of the panelists in session 401 said something that's been on my mind for some time: we need to start thinking about moving away from document-based finding aids. I like Encoded Archival Description (and well-crafted MARC records make me feel as if there is an inner logic and order to the world), but it's high time we stopped thinking of archival description solely in terms of "fast paper."

Thursday, August 26, 2010

Your chance to weigh in on proposed U.S. HIPAA rule changes

A few weeks ago, the U.S. Department of Health and Human Services published a series of proposed changes to the Privacy, Security, and Enforcement Rules of the Health Insurance Portability and Accountability Act (HIPAA), which governs access to medical records and personal health information.

One of these regulatory changes centers upon access to data concerning deceased persons and ought to be of great interest to archivists, historians of medicine and social welfare policy, and genealogists. As archivists Stephen Novak and Nancy McCall testified at a 2005 hearing held by the Department of Health and Human Services, National Committee on Vital and Health Statistics, Sub-Committee on Privacy and Confidentiality, HIPAA's imposition of perpetual access restrictions upon "personal health information" poses myriad challenges for archivists and researchers alike.

The following proposed change is intended to address these concerns:
1. Section 164.502(f)--Period of Protection for Decedent Information
Section 164.502(f) requires covered entities to protect the privacy of a decedent's protected health information generally in the same manner and to the same extent that is required for the protected health information of living individuals. Thus, if an authorization is required for the use or disclosure of protected health information, a covered entity may use or disclose a decedent's protected health information in that situation only if the covered entity obtains an authorization from the decedent's personal representative. The personal representative for a decedent is the executor, administrator, or other person who has authority under applicable law to act on behalf of the decedent or the decedent's estate. The Department has heard a number of concerns since the publication of the Privacy Rule that it can be difficult to locate a personal representative to authorize the use or disclosure of the decedent's protected health information, particularly after an estate is closed. Furthermore, archivists, biographers and historians have expressed frustration regarding the lack of access to ancient or old records of historical value held by covered entities, even when there are likely few remaining individuals concerned with the privacy of such information. Archives and libraries may hold medical records that are centuries old. Furthermore, fragments of health information may be found throughout all types of archival holdings, such as correspondence files, diaries, and photograph collections, that are also in some cases centuries old. Currently, to the extent such information is maintained by a covered entity, it is subject to the Privacy Rule. For example, currently the Privacy Rule would apply in the same manner to the casebook of a 19th century physician as it would to the medical records of current patients of a physician.
Accordingly, we propose to amend Sec. 164.502(f) to require a covered entity to comply with the requirements of the Privacy Rule with regard to the protected health information of a deceased individual for a period of 50 years following the date of death. We also propose to modify the definition of ``protected health information'' at Sec. 160.103 to make clear that the individually identifiable health information of a person who has been deceased for more than 50 years is not protected health information under the Privacy Rule. We believe that fifty years is an appropriate time span, because by approximately covering the span of two generations we believe it will both protect the privacy interests of most, if not all, living relatives, or other affected individuals, and it reflects the difficulty of obtaining authorizations from personal representatives as time passes. A fifty- year period of protection also was suggested at a prior National Committee for Vital and Health Statistics (NCVHS) (the public advisory committee which advises the Secretary on the implementation of the Administrative Simplification provisions of HIPAA, among other issues) meeting, at which committee members heard testimony from archivists regarding the problems associated with applying the Privacy Rule to very old records. See http://ncvhs.hhs.gov/050111mn.htm. We request public comment on the appropriateness of this time period.
My employer holds medical records and will, in all likelihood, take an official position on these proposed changes. My views will be reflected in my employer's comment (I'm not being facetious -- I'm involved in the discussion), but I think it's really important for individuals to speak out as well. If you are an archivist or records manager, a scholar or genealogist seeking access to older medical records, or simply have an interest in striking a balance between personal privacy and access to records, please take the time to look over the proposed changes in their entirety (go to http://www.regulations.gov/search/Regs/home.html#home, check "Open for Comment/Submission," and search for "HIPAA"), think through their implications, and submit a comment outlining your position. Comments will be accepted until 13 September 2010.