2026-04-17 Privacy SIG Meeting Notes

Date

Apr 17, 2026

https://openlibraryfoundation.zoom.us/meetings/89139972182/invitations?signature=D6xiulV6yXbB5ZgoGKKfK1TMv6a3RempLIFAgijgP30

Participants

Discussion topics

Topic	Presenter	Notes

Topic

Presenter

Notes

Determine which modules have PIIs.

Can potential use AJ’s work with anonymization fields in MetaDB to help inform this workflow. https://folio-org.atlassian.net/wiki/spaces/PRIV/pages/edit-v2/1775403019 However, if you don’t use MetaDB you cannot look this information up the same way.
PII Status
Jenn suggests MetaDB privacy SIG and Privacy SIG collaborate on this work. Where Privacy SIG hosts the information working with other groups to gather the information.
Some work has been done on thishttps://folio-org.atlassian.net/wiki/spaces/RPT/pages/4495531 , but it is not a list of fields, but content evaluation.
We’ll need both fields and modules to do a complete PII evaluation.
Information should support users and developers who should be considering this issues by design.
Shelly Doljack’s work with https://folio-org.atlassian.net/wiki/spaces/DQA/pages/674758661

Getting PPD script running.

https://folio-org.atlassian.net/wiki/spaces/PRIV/pages/1884422146

Form needs to be reevaluated.
Prioritize mods that don’t have PDD forms.
Could potentially scan by application to help prioritize things that are used by everybody.
Could run whenever we have a module release.
Reach out to Product Owner for missing or insufficient PDD forms.
Can bring to Product Owners meeting to discuss.

Action items

Create workflow, schedule (procedure) for periodically updating the PDD inventory.

Continue to encourage FOLIO module owners to update their PDD forms so we can get a big picture view of which modules handle PD. Developing a method for checking updates to PDD forms continues to be a priority for the SIG.

Generate a data flow map, to show where PD originates, where it is stored > processed > transmitted. This will help with working through GDPR questions, and down the line will also help FOLIO implementors understand the flow of data through their integration.

Gather data mapping examples from the privacy professionals community.

Extend PPD script to include Product Owners.

WOLFCON proposal

Check PC liaison