Molly and I will be working on rewriting our privacy/confidentiality policy and developing related procedures soon. This is a good recent article about libraries and the importance of patron privacy.
https://www.eff.org/deeplinks/2016/12/librarians-act-now-protect-your-users-its-too-late