District of Columbia Code : http://government.westlaw.com/linkedslice/search/default.asp?RS=GVT1.0&VR=2.0&SP=dcc-1000
DC Library Association:
Security Breach Notification Law : D.C. Code § 28- 3851 et seq.
Data Disposal Law: NA
Library Records Privacy:
TITLE 39. LIBRARIES AND CULTURAL INSTITUTIONS. SUBTITLE I. LIBRARIES. CHAPTER 1. PUBLIC LIBRARIES. SUBCHAPTER I. GENERAL.
§ 39-108. Confidentiality of circulation records.
(a) Circulation records maintained by the public library in the District of Columbia which can be used to identify a library patron who has requested, used, or borrowed identified library materials from the public library and the specific material that patron has requested, used, or borrowed from the public library, shall be kept confidential, except that the records may be disclosed to officers, employees, and agents of the public library to the extent necessary for the proper operation of the public library.
(b) (1) Circulation records shall not be disclosed by any officer, employee, or agent of the public library to a third party or parties, except with the written permission of the affected library patron or as the result of a court order.
(2) A person whose records are requested pursuant to paragraph (1) of this subsection may file a motion in the Superior Court of the District of Columbia requesting that the records be kept confidential. The motion shall be accompanied by the reasons for the request.
(3) Paragraph (1) of this subsection shall not operate to prohibit the officers of the public library from disclosing relevant information on a library patron to the Corporation Counsel of the District of Columbia or legal counsel retained to represent the public library in a civil action.
(4) Within 2 working days after receiving a subpoena issued by the court for public library records, the public library shall send a copy of the subpoena and the following notice, by certified mail, to all affected library patrons:
"Records or information concerning your borrowing records in the public library in the District of Columbia are being sought pursuant to the enclosed subpoena.
"In accordance with the District of Columbia Confidentiality of Library Records Act of 1984, these records will not be released until 10 days from the date this notice was mailed.
"If you desire that these records or information not be released, you must file a motion in the Superior Court of the District of Columbia requesting that the records be kept confidential, and state your reasons for the request. A sample motion is enclosed.
"You may wish to contact a lawyer. If you do not have a lawyer, you may call the District of Columbia Bar Lawyer Referral Service."
(5) The public library shall not make available any subpoenaed materials until 10 days after the above notice has been mailed.
(6) Upon application of a government authority, the notice required by paragraph (4) of this subsection may be waived by order of an appropriate court if the presiding judge finds that:
(A) The investigation being conducted is within the lawful jurisdiction of the government authority seeking the records;
(B) There is reason to believe that the records being sought are relevant to a legitimate law enforcement inquiry; or
(C) There is reason to believe that the notice will result in:
(i) Endangering the life or physical safety of any person;
(ii) Flight from prosecution;
(iii) Destruction of or tampering with evidence;
(iv) Intimidation of potential witnesses; or
(v) Otherwise seriously jeopardizing an investigation or official proceeding.
(7) The term "government authority", as used in paragraph (6) of this subsection, means any federal, state, or local government agency or department.
(c) The Board of Library Trustees may issue rules necessary to implement this section.
(d) Unless otherwise authorized or required by law, any officer, employee, or agent of the public library who shall violate any provision of this section or any rules issued pursuant to it commits a misdemeanor, and upon conviction shall be punished by a fine of not more than $300. The aggrieved public library patron may also bring a civil action against the individual violator for actual damages or $250, whichever is greater, reasonable attorneys’ fees, and court costs.