NIMR NHRILS National Health Research Integrated Library System

Privacy Notice

Catalogue privacy and data handling

NHRILS starts with public catalogue discovery. This MVP notice explains the expected privacy posture before authenticated patron and circulation workflows are enabled.

What the public catalogue shows

  • Public pages show bibliographic metadata, source details, subjects, identifiers, and approved access links.
  • The catalogue should not expose patron borrowing history, private contact details, internal staff notes, or restricted operational data.
  • Seed review pages are for metadata readiness and should not be treated as final production records.

Future personal data handling

  • Authenticated request, loan, and notification workflows will require separate approval before collecting user identity or contact details.
  • Future patron data handling should define lawful purpose, retention, access control, audit, and support responsibilities.
  • Do not enter sensitive personal information into request notes or support channels unless the approved workflow requires it.