OCLC's Response to the General Data Protection Regulation

<!DOCTYPE HTML> <html class=" no-js" lang="zh-Hant" dir="ltr"> <head> <meta charset="utf-8" /> <link rel="stylesheet" href="/etc.clientlibs/clientlibs/social/commons/scf.min.css" type="text/css"> <link rel="stylesheet" href="/libs/social/subscriptions/components/hbs/subscriptions/clientlibs.min.css" type="text/css"> <link rel="stylesheet" href="/etc.clientlibs/clientlibs/social/commons/cards.min.css" type="text/css"> <link rel="stylesheet" href="/libs/social/tally/components/hbs/voting/clientlibs.min.css" type="text/css"> <link rel="stylesheet" href="/etc.clientlibs/clientlibs/social/hbs/reviews.min.css" type="text/css"> <script src="/etc.clientlibs/clientlibs/granite/jquery.min.js"></script> <script src="/etc.clientlibs/clientlibs/granite/utils.min.js"></script> <script src="/etc.clientlibs/clientlibs/granite/jquery/granite.min.js"></script> <script src="/etc.clientlibs/foundation/clientlibs/jquery.min.js"></script> <script src="/etc.clientlibs/foundation/clientlibs/shared.min.js"></script> <script src="/etc.clientlibs/clientlibs/social/thirdparty/underscore.min.js"></script> <script src="/etc.clientlibs/clientlibs/granite/moment.min.js"></script> <script src="/etc.clientlibs/clientlibs/social/thirdparty/backbone.min.js"></script> <script src="/etc.clientlibs/clientlibs/social/thirdparty/handlebars.min.js"></script> <script src="/etc.clientlibs/clientlibs/social/commons/scf.min.js"></script> <script src="/etc.clientlibs/oclc/clientlibs/social/commons/scf.min.js"></script> <script src="/libs/social/subscriptions/components/hbs/subscriptions/clientlibs.min.js"></script> <script src="/etc.clientlibs/clientlibs/social/commons/cards.min.js"></script> <script src="/libs/social/tally/components/hbs/voting/clientlibs.min.js"></script> <script src="/etc.clientlibs/clientlibs/social/hbs/reviews.min.js"></script> <link rel="stylesheet" href="/etc.clientlibs/clientlibs/social/hbs/tally/voting.min.css" type="text/css"> <link rel="stylesheet" href="/etc.clientlibs/clientlibs/social/hbs/subscriptions.min.css" type="text/css"> <link rel="stylesheet" href="/etc.clientlibs/clientlibs/social/hbs/comments.min.css" type="text/css"> <script src="/etc.clientlibs/clientlibs/social/hbs/tally/voting.min.js"></script> <script src="/etc.clientlibs/clientlibs/social/hbs/subscriptions.min.js"></script> <script src="/etc.clientlibs/clientlibs/social/hbs/comments.min.js"></script> <link rel="stylesheet" href="/etc.clientlibs/clientlibs/social/hbs/tally/rating.min.css" type="text/css"> <script src="/etc.clientlibs/clientlibs/social/hbs/tally/rating.min.js"></script> <script src="/etc.clientlibs/oclc/clientlibs/oclc/jquery.min.js"></script> <script src="/etc.clientlibs/oclc/clientlibs/oclc/jquery/oclc.min.js"></script> <link rel="stylesheet" href="/apps/oclc/clientlibs/oclc/jquery-ui.min.css" type="text/css"> <script src="/apps/oclc/clientlibs/oclc/jquery-ui.min.js"></script> <script src="/etc.clientlibs/oclc/clientlibs/oclc/jquery/animation.min.js"></script> <link rel="stylesheet" href="/etc.clientlibs/clientlibs/granite/jquery-ui.min.css" type="text/css"> <script src="/etc.clientlibs/clientlibs/granite/jquery-ui.min.js"></script> <script src="/etc.clientlibs/foundation/clientlibs/jquery-ui.min.js"></script> <script src="/etc.clientlibs/clientlibs/social/thirdparty/ckeditor.min.js"></script> <title>OCLC's Response to the General Data Protection Regulation </title> <meta name="description" content="" />  <meta name="DC.Title" content="OCLC's Response to the General Data Protection Regulation" /> <meta name="DCTERMS.Alternative" content="OCLC's Response to the General Data Protection Regulation"> <meta name="DC.Subject" content="" /> <meta name="DC.Description" content=""> <meta name="DC.Publisher" content="OCLC" /> <meta name="DC.Creator" content=""> <meta name="DC.Contributor" content=""/> <meta name="DCTERMS.Created" scheme="DCTERMS.W3CTDF" content="2019-9-18"> <meta name="DCTERMS.Issued" scheme="DCTERMS.W3CTDF" content="2019-9-18"> <meta name="DCTERMS.Modified" scheme="DCTERMS.W3CTDF" content="2019-9-18"> <meta name="DC.Language" content="en"> <meta name="DC.Modified" content="2019-9-18" /> <meta name="DC.Rights" content="" /> <meta name="twitter:title" content="OCLC's Response to the General Data Protection Regulation" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:site" content="@OCLC" /> <meta name="twitter:domain" content="www.oclc.org" /> <meta name="twitter:image" content="https://policies.oclc.org/content/dam/oclc/logos/oclc/og_image_oclc.png" /> <meta property="og:image" content="https://policies.oclc.org/content/dam/oclc/logos/oclc/og_image_oclc.png" /> <meta property="og:type" content="website" /> <meta property="og:site_name" content="OCLC" /> <meta property="og:title" content="OCLC's Response to the General Data Protection Regulation" /> <meta property="og:locale" content="zh_TW" /> <meta property="og:url" content="https://policies.oclc.org/zh-Hant/privacy/gdpr-analysis.html" /> <meta name="viewport" content="width=device-width" /> <link rel="canonical" href="https://policies.oclc.org/zh-Hant/privacy/gdpr-analysis.html"/> <link rel="alternate" href="https://policies.oclc.org/ca/privacy/gdpr-analysis.html" hreflang="ca"/> <link rel="alternate" href="https://policies.oclc.org/eu/privacy/gdpr-analysis.html" hreflang="eu"/> <link rel="alternate" href="https://www.oclc.org/content/legal/pl_pl/privacy/gdpr-analysis.html" hreflang="en"/> <link rel="alternate" href="https://www.oclc.org/content/legal/ru_ru/privacy/gdpr-analysis.html" hreflang="en"/> <link rel="alternate" href="https://policies.oclc.org/ar/privacy/gdpr-analysis.html" hreflang="ar"/> <link rel="alternate" href="https://policies.oclc.org/cs/privacy/gdpr-analysis.html" hreflang="cs"/> <link rel="alternate" href="https://policies.oclc.org/de/privacy/gdpr-analysis.html" hreflang="de"/> <link rel="alternate" href="https://policies.oclc.org/en/privacy/gdpr-analysis.html" hreflang="en"/> <link rel="alternate" href="https://policies.oclc.org/es/privacy/gdpr-analysis.html" hreflang="es"/> <link rel="alternate" href="https://policies.oclc.org/fr/privacy/gdpr-analysis.html" hreflang="fr"/> <link rel="alternate" href="https://policies.oclc.org/it/privacy/gdpr-analysis.html" hreflang="it"/> <link rel="alternate" href="https://policies.oclc.org/ja/privacy/gdpr-analysis.html" hreflang="ja"/> <link rel="alternate" href="https://policies.oclc.org/ko/privacy/gdpr-analysis.html" hreflang="ko"/> <link rel="alternate" href="https://policies.oclc.org/mi/privacy/gdpr-analysis.html" hreflang="mi"/> <link rel="alternate" href="https://policies.oclc.org/nl/privacy/gdpr-analysis.html" hreflang="nl"/> <link rel="alternate" href="https://policies.oclc.org/pt/privacy/gdpr-analysis.html" hreflang="pt"/> <link rel="alternate" href="https://policies.oclc.org/sv/privacy/gdpr-analysis.html" hreflang="sv"/> <link rel="alternate" href="https://policies.oclc.org/th/privacy/gdpr-analysis.html" hreflang="th"/> <link rel="alternate" href="https://policies.oclc.org/zh-Hans/privacy/gdpr-analysis.html" hreflang="zh-Hans"/> <link rel="alternate" href="https://policies.oclc.org/zh-Hant/privacy/gdpr-analysis.html" hreflang="zh-Hant"/>   <link rel="icon" href="/apps/settings/wcm/designs/oclc/images/favicon.ico" sizes="32x32"/> <link rel="icon" href="/apps/settings/wcm/designs/oclc/images/icon.svg" type="image/svg+xml"/> <link rel="apple-touch-icon" href="/apps/settings/wcm/designs/oclc/images/apple-touch-icon.png"/> <script type="text/javascript"> if(typeof String.prototype.trim !== 'function') { String.prototype.trim = function() { return this.replace(/^\s+|\s+$/g, ''); } } </script>  <script src="/etc.clientlibs/oclc/clientlibs/oclc/modernizr.min.js"></script> <link rel="stylesheet" href="/etc.clientlibs/clientlibs/social/thirdparty/bootstrap3.min.css" type="text/css"> <script src="/etc.clientlibs/clientlibs/social/thirdparty/bootstrap3.min.js"></script> <script type="text/javascript" src="/apps/oclc/clientlibs/oclc/jquery-ui/source/jquery-ui.min.js"></script> <script type="text/javascript"> (function ($) { $(function () { yepnope([{ load: '/apps/settings/wcm/designs/oclc/js/jquery/jquery.easing.js' }, { test: $("#faq-set").length, yep: ['/apps/settings/wcm/designs/oclc/js/faqs-functions-v0.1.js'] }, { // FancyBox for modals: http://fancybox.net test: ($("a.modal-media").length || $("a.modal").length || $("a.img-gallery").length || $("a.modal-iframe").length || $(".modal-youtube").length), yep: ['/apps/settings/wcm/designs/oclc/js/jquery/fancybox/jquery.fancybox.pack.js', '/apps/settings/wcm/designs/oclc/js/jquery/fancybox/jquery.fancybox.css', '/apps/settings/wcm/designs/oclc/js/jquery/fancybox/helpers/jquery.fancybox-media.js', '/apps/settings/wcm/designs/oclc/js/modal-functions-v0.1.js'] }, { // Sitebar show/hide test: ($("#sitebar-sites").length), yep: ['/apps/settings/wcm/designs/oclc/js/jquery/jquery.hoverIntent.minified.js', '/apps/settings/wcm/designs/oclc/js/sitebar-functions-v0.1.js'] }, { // Showhide test: ($(".showhide").length), yep: ['/apps/settings/wcm/designs/oclc/js/showhide-functions-v0.1.js'] }, { test: $.autocomplete, nope: '/apps/oclc/clientlibs/oclc/jquery-ui/source/jquery-ui.min.js', complete: function () { if ($("#search-terms").autocomplete) { $("#search-terms").autocomplete({ source: function (request, response) { var s_siteVal = $("#s_site").val(), s_clientVal = $("#s_client").val(), uri = '/apps/oclc/suggest?q='; uri = uri + request.term + '&site=' + encodeURIComponent(s_siteVal) + '&client=' + encodeURIComponent(s_clientVal); $.ajax({ url: uri, dataType: "json", type: "GET", success: function (data) { response(data); } }); //ajax closed } //source closed }); //autocomplete closed } if ($("#result-search-terms").autocomplete) { $("#result-search-terms").autocomplete({ source: function (request, response) { var sr_siteVal = $("#sr_site").val(), sr_clientVal = $("#sr_client").val(), uri = '/apps/oclc/suggest?q='; uri = uri + request.term + '&site=' + encodeURIComponent(sr_siteVal) + '&client=' + encodeURIComponent(sr_clientVal); $.ajax({ url: uri, dataType: "json", type: "GET", success: function (data) { response(data); } }); //ajax closed } //source closed }); //autocomplete closed } } }]); }); }(jQuery)); </script>  <link rel="stylesheet" href="https://use.typekit.net/xyd8noe.css"> <script src="/apps/settings/wcm/designs/oclc/js/jquery/jquery.url.min.js"></script> <script src="/apps/settings/wcm/designs/oclc/js/toggle-show-hide.js" type="text/javascript"></script> <script src="/apps/settings/wcm/designs/oclc/js/zh-TW.js"></script> <script> (function($){ $(function() { yepnope({ test: $('div.form').length > 0, // test whether the a form exists on the page with "validate" class yep: ['/apps/settings/wcm/designs/oclc/js/jquery/jquery.validate.1.11.1.min.js','/etc/oclc/js/forms-functions-v0.4.js'] }); }); })(jQuery); </script> <script src="/etc.clientlibs/cq/personalization/clientlib/underscore.min.js"></script> <script src="/etc.clientlibs/cq/personalization/clientlib/personalization/kernel.min.js"></script> <script type="text/javascript"> $CQ(function() { CQ_Analytics.SegmentMgr.loadSegments("\/etc\/segmentation"); CQ_Analytics.ClientContextUtils.init("\/etc\/clientcontext\/default", "\/content\/legal\/zh_tw\/privacy\/gdpr\u002Danalysis"); }); </script>  <link rel="stylesheet" href="/apps/settings/wcm/designs/oclc/oclc-main-v2/main.css?v=20241030"> <link href="/apps/settings/wcm/designs/oclc/syntaxhighlighter/shThemeDefault.css" rel="stylesheet" type="text/css"/> <link href="/apps/settings/wcm/designs/oclc/syntaxhighlighter/shCore.css" rel="stylesheet" type="text/css"/>   <script type="text/javascript" src="https://cdn.cookielaw.org/consent/999c7907-ac3c-4ce1-9125-172f53ec926f/OtAutoBlock.js"></script> <script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" data-document-language="true" type="text/javascript" charset="UTF-8" data-domain-script="999c7907-ac3c-4ce1-9125-172f53ec926f"></script> <script type="text/javascript"> function OptanonWrapper() { } </script>   <link rel="preconnect" href="https://dev.visualwebsiteoptimizer.com"/> <script type='text/javascript' id='vwoCode'> window._vwo_code || (function() { var account_id=743027, version=2.0, settings_tolerance=2000, hide_element='body', hide_element_style = 'opacity:0 !important;filter:alpha(opacity=0) !important;background:none !important', /* DO NOT EDIT BELOW THIS LINE */ f=false,w=window,d=document,v=d.querySelector('#vwoCode'),cK='_vwo_'+account_id+'_settings',cc={};try{var c=JSON.parse(localStorage.getItem('_vwo_'+account_id+'_config'));cc=c&&typeof c==='object'?c:{}}catch(e){}var stT=cc.stT==='session'?w.sessionStorage:w.localStorage;code={use_existing_jquery:function(){return typeof use_existing_jquery!=='undefined'?use_existing_jquery:undefined},library_tolerance:function(){return typeof library_tolerance!=='undefined'?library_tolerance:undefined},settings_tolerance:function(){return cc.sT||settings_tolerance},hide_element_style:function(){return'{'+(cc.hES||hide_element_style)+'}'},hide_element:function(){return typeof cc.hE==='string'?cc.hE:hide_element},getVersion:function(){return version},finish:function(){if(!f){f=true;var e=d.getElementById('_vis_opt_path_hides');if(e)e.parentNode.removeChild(e)}},finished:function(){return f},load:function(e){var t=this.getSettings(),n=d.createElement('script'),i=this;if(t){n.textContent=t;d.getElementsByTagName('head')[0].appendChild(n);if(!w.VWO||VWO.caE){stT.removeItem(cK);i.load(e)}}else{n.fetchPriority='high';n.src=e;n.type='text/javascript';n.onerror=function(){_vwo_code.finish()};d.getElementsByTagName('head')[0].appendChild(n)}},getSettings:function(){try{var e=stT.getItem(cK);if(!e){return}e=JSON.parse(e);if(Date.now()>e.e){stT.removeItem(cK);return}return e.s}catch(e){return}},init:function(){if(d.URL.indexOf('__vwo_disable__')>-1)return;var e=this.settings_tolerance();w._vwo_settings_timer=setTimeout(function(){_vwo_code.finish();stT.removeItem(cK)},e);var t=d.currentScript,n=d.createElement('style'),i=this.hide_element(),r=t&&!t.async&&i?i+this.hide_element_style():'',c=d.getElementsByTagName('head')[0];n.setAttribute('id','_vis_opt_path_hides');v&&n.setAttribute('nonce',v.nonce);n.setAttribute('type','text/css');if(n.styleSheet)n.styleSheet.cssText=r;else n.appendChild(d.createTextNode(r));c.appendChild(n);this.load('https://dev.visualwebsiteoptimizer.com/j.php?a='+account_id+'&u='+encodeURIComponent(d.URL)+'&vn='+version)}};w._vwo_code=code;code.init();})(); </script>  <script> dataLayer = [{ 'site': '', 'language': 'zh_tw' }]; </script>  <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl+ '&gtm_auth=iGoSLkTwa8G0GRiDWDJMVw&gtm_preview=env-2&gtm_cookies_win=x';f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-TC83QFB');</script>  </head> <body class="oclc">  <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-TC83QFB&gtm_auth=iGoSLkTwa8G0GRiDWDJMVw&gtm_preview=env-2&gtm_cookies_win=x" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>  <noscript> <div class="nojs-caution"> <p> <strong>目前不支援JavaScript或者被瀏覽器停止使用。 </strong> <br> 網站中的某些功能還不能用。請啓用JavaScript後再使用全部功能。 <br> </p> </div> </noscript> <DIV class="header_microbar iparsys parsys"><div class="section"><div class="new"></div> </div><div class="iparys_inherited"><div class="header_microbar iparsys parsys"></div> </div> </DIV> <div class="cont-main"> <div class="header iparsys parsys"><div class="section"><div class="new"></div> </div><div class="iparys_inherited"><div class="header iparsys parsys"><div class="header parbase section"> <header> <script> (function ($) { $(function() { yepnope({ test: window.location.search != null && (window.location.search.indexOf("urlf=") >= 0 || window.location.search.indexOf("urlm=") >= 0), // test whether the url querystring has a parameter yep: ['/apps/oclc/docroot/js/urlmapper.js'] }); }); })(jQuery); </script> <script type="text/javascript"> (function (OCLC, $) { OCLC.logout = function() { if (_g && _g.shared && _g.shared.ClientSidePersistence) { //_g.shared.ClientSidePersistence.clearAllMaps(); } if( CQ_Analytics && CQ_Analytics.CCM) { //CQ_Analytics.ProfileDataMgr.clear(); //CQ_Analytics.CCM.reset(); //CQ_Analytics.ProfileDataMgr.loadProfile("anonymous"); CQ.shared.Util.load("/apps/oclc/logout"); } } OCLC.empty = function (data) { if (typeof (data) == 'number' || typeof (data) == 'boolean') { return false; } if (typeof (data) == 'undefined' || data === null) { return true; } if (typeof (data.length) != 'undefined') { return data.length == 0; } var count = 0; for (var i in data) { if (data.hasOwnProperty(i)) { count++; } } return count == 0; } $(function () { var headerLinks, headerName, headerLink; if (!CQ.shared.User.isInitialized() ) { CQ.shared.User.init(); CQ_Analytics.ProfileDataMgr.loadProfile(CQ.shared.User.data.userID); } if (CQ_Analytics.ProfileDataMgr.getData().authorizableId === 'anonymous') { } else { headerLinks = $('<ul class="header__profile-links">') .append('<li><a title="登出" id="signout-link" href="#">登出</a></li>'); if (!OCLC.empty('/content/marketing/publish/en_us/user/view-profile.html')) { headerLink = CQ_Analytics.ProfileDataMgr.data.path + '.form.html/content/marketing/publish/en_us/user/view-profile.html'; headerName = CQ_Analytics.ProfileDataMgr.data.formattedName; headerLinks.append('<li><a title="View or edit your account info" href="' + headerLink + '">' + headerName + '</a></li>'); } $('#header__profile').append(headerLinks); $("#signout-link").click(function(e) { e.preventDefault(); OCLC.logout(); return false; }); } }); }(window.OCLC = window.OCLC || {}, jQuery)); </script> <div class="cont-page"> <section class="header__pre"> <div class="skip-nav visuallyhidden"> <p><a href="#main-content" title="Skip navigation and go directly to page content">Skip to page content.</a></p> </div> <div id="url-mapper-msg"></div> </section> <section class="header__top"> <a class="header__icon-button hide-desktop" id="mobile-menu" href="#">Menu</a> <div class="header__brand"> <div class="logo globallogo parbase">  <div> <a href="https://www.oclc.org/en/home.html"> <img src="/content/dam/oclc/design-images/navigation-logo.svg" border="0" title="OCLC.org 首頁" alt="OCLC 標誌" class="oclc-logo"> </a> </div> </div> <div class="logo-secondary globallogo parbase">  <a href="https://policies.oclc.org/zh-Hant/home.html"> 政策 </a> </div> </div> <div class="header__controls"> <script> var contentLink = ''; </script> <div class="header__profile" id="header__profile"></div> </div> <a class="header__icon-button hide-desktop" id="mobile-search" href="#">Search</a> </section> <section class="header__bottom"> <div class="topnav"> <script> (function ($) { $(function () { yepnope({ test: $.hoverIntent, // test whether hoverIntent nope: ['/apps/settings/wcm/designs/oclc/js/jquery/jquery.hoverIntent.minified.js'], complete: function () { yepnope({ load: ['/apps/settings/wcm/designs/oclc/js/mainnavigation-functions-v0.3.js', '/apps/settings/wcm/designs/oclc/js/jquery/jquery.ba-outside-events.js'] }); } }); $(window).bind("load", function () {}); // Not sure why this is here. }); }(jQuery)); </script> </div> <div class="search"> <link rel="stylesheet" href="/apps/settings/wcm/designs/oclc/coveo/css/CoveoFullSearchNewDesign.css"/> <script src="/apps/settings/wcm/designs/oclc/coveo/js/CoveoJsSearch.js"></script> <link rel="stylesheet" type="text/css" href="/apps/settings/wcm/designs/oclc/coveo/css/oclccoveosearchextension.css"/> <div class="oclc-coveo-search"> <section class="search-box"> <div id="searchbox" class="CoveoSearchInterface" data-pipeline=""> <div class="coveo-search-section"> <div class="CoveoSearchbox" data-enable-omnibox="true" data-inline="false" data-enable-wildcards="true" data-enable-search-as-you-type="false" data-enable-query-suggest-addon="true" data-enable-query-syntax="true" data-enable-field-addon="true" data-auto-focus="false"> </div> </div> </div> <div> <input type="hidden" name="resultsPagePath" value="" id="resultsPagePath"> <input type="hidden" name="accessToken" value="xxc839667d-dd5e-474e-b3ab-c84b434185fe" id="accessToken"> <input type="hidden" name="searchUrl" value="https://platform.cloud.coveo.com/rest/search" id="searchUrl"> <input type="hidden" name="searchWord" value="" id="searchWord"> </div> </section> </div> <script type="text/javascript"> //This is to fix the issue with amlib and olib where there are multiple //standalone searchboxes on the same page. This disables all searchboxes //except the last one. coveo doesn't support instantiating multiple global //search boxes on the same page. $('body').find('.oclc-coveo-search:not(:last)').remove(); var searchResultsPage = $('#resultsPagePath').val(); var accessTokenVal = $('#accessToken').val(); var searchUrlVal = $('#searchUrl').val(); var searchWordVal = $('#searchWord').val(); document.addEventListener("DOMContentLoaded", function() { Coveo.SearchEndpoint.endpoints["default"] = new Coveo.SearchEndpoint({ restUri: searchUrlVal, accessToken: accessTokenVal }); var root = Coveo.$$(document).find("#searchbox"); if ("" != searchResultsPage && null != searchResultsPage) { Coveo.initSearchbox(root, searchResultsPage, { Searchbox: { placeholder: searchWordVal } }); } }); </script> </div> </section> </div> </header> </div> <div class="customjavascript section"> <style> .header.parbase header { padding: 0; } .header__top { min-height: 3.5rem; align-items: center; } .header__top .header__brand { margin-block: 0; } .header__top .globallogo img { height: 2.125rem; } #mobile-menu, #mobile-search { display: none; } .header__bottom { display: none; } /* TEMP - delete after 2024-11-01 */ .header__top .globallogo.logo-secondary:has(a)::before { content: ''; display: inline-block; width: 1px; background: var(--border-2); height: calc(100% - 0.5rem); margin-inline: 1rem; margin-block: 0.25rem; } .header__top .globallogo.logo-secondary a { text-decoration: none; --link: var(--text-secondary); --link-hover: var(--text-tertiary); --link-visited: var(--text-secondary); font-size: var(--font-size-2x); line-height: var(--line-height-sm); letter-spacing: var(--auto-letter-spacing); margin-block-start: 5px; } /* END TEMP */ </style></div> </div> </div> </div> <div id="main-content" class="cont-page mod"> <div class="parsys_column interior-content"> <div class="parsys_column home-content-c0"> <div class="cont-page mod crumbs-tools"> <div class="breadcrumb"></div> </div> <div class="page-content no-nav"> <div class="par parsys"><div class="text parbase section"> <h1>OCLC's Response to the General Data Protection Regulation</h1> <p><em>Last Revised: 21 June 2019</em></p> </div> <div class="text parbase section"> <p>In May 2018, the General Data Protection Regulation (GDPR) went into effect for the European Union (EU). OCLC is committed to supporting our partners and customers by proactively reviewing practices and products with a GDPR lens and taking ongoing action as appropriate. What's more, we have initiated formal GDPR projects and other activities specifically focused on our products to help libraries meet GDPR obligations.</p> <p>Responsibility for GDPR compliance involves different activities on the part of data controllers (in this case, OCLC's customers in general) and data processors (OCLC). The information below is meant to provide insight into OCLC's response to the GDPR and a customer's role in the compliance process. </p> <p>Note: The information below does not constitute legal advice. If you have any specific questions as to how the GDPR impacts your institution's relationship with OCLC, please contact the OCLC data protection officer at <a href="/cdn-cgi/l/email-protection#7317031c331c101f105d1c0114"><span class="__cf_email__" data-cfemail="2246524d624d414e410c4d5045">[email protected]</span></a>.</p> <table cellspacing="0" cellpadding="0" border="1"> <tbody> <tr> <th width="250" valign="top"><p>Articles</p> </th> <th valign="top"><p>OCLC's Response to the Articles</p> </th> </tr> <tr> <td width="250" valign="top"><p><strong>Article 1:</strong> Subject Matter and Objectives</p> </td> <td valign="top"><p>Article 1 highlights the objectives of the GDPR, which include protection of personal data and the free movement of personal data.</p> <p>OCLC respects people's fundamental rights and freedoms and has in place protections for the processing of personal data, including the personal data of library staff members and patrons. OCLC analyzes data transfers both within the EU and outside the EU.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 2:</strong> Material Scope</p> </td> <td valign="top"><p>The processing of personal data, in whole or in part, by automated means can fall within the scope of the GDPR under Article 2.</p> <p>OCLC processes personal data that can be within the scope of processing described in Article 2. OCLC's products are used by libraries to manage their operations. OCLC receives the personal data of staff members and patrons from libraries.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 3:</strong> Territorial Scope</p> </td> <td valign="top"><p>Article 3 describes situations during which the GDPR applies. It applies to companies with an establishment in the EU and outside the EU in the context of the activities of the EU establishments. Further, the GDPR can apply to companies without an establishment in the EU when they offer goods or services to people in the EU or monitor those people's behavior.</p> <p>The GDPR applies to OCLC. OCLC has establishments in the EU, including our EU headquarters in the Netherlands. OCLC has non-EU activities supporting EU establishments that are also subject to the GDPR.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 4:</strong> Definitions</p> </td> <td valign="top"><p>Article 4 defines 26 terms, including personal data, processing, controller, and processor.</p> <p>Generally, as between OCLC and a library, the library is the controller under the GDPR with respect to the handling of personal data of its staff members and patrons. OCLC is then a processor for the library when providing products.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 5:</strong> Principles Relating to the Processing of Personal Data</p> </td> <td valign="top"><p>Article 5 sets out the principles of data processing, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability.</p> <p>Generally, the library will be in the position of making these determinations in its relationship with its patrons and staff members. For example, the library would determine what data to collect from its patrons in order to offer library services, the lawful basis of processing the data, and how to provide a privacy notice to the patrons in order to be transparent about the library's use of the data.</p> <p>In many instances, however, OCLC products may be able to help a library fulfill its obligations with respect to these principles. For example, the applicable OCLC product may allow the library to display a privacy notice drafted by the library.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 6:</strong> Lawfulness of Processing</p> </td> <td valign="top"><p>Article 6 provides the various lawful bases of processing personal data, such as consent of the data subject or necessity for the purposes of the legitimate interests of the controller.</p> <p>As the controller, the library determines the lawful bases for the processing of personal data of its patrons and staff members. OCLC's processing, as a processor for the library, would be performed at the direction of the library as described in the applicable contract between the library and OCLC.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 7 and 8:</strong> Conditions for Consent; Conditions Applicable to Child's Consent in Relation to Information Society Services</p> </td> <td valign="top"><p>Article 7 describes what is required for consent when this is the lawful basis of processing.</p> <p>Article 8 expands upon the consent requirements in Article 7 with respect to children.</p> <p>As the controller, the library is responsible for complying with Articles 7 and 8, as applicable, when consent is the lawful basis for the processing of patron or staff member data.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 9:</strong> Processing of Special Categories of Personal Data</p> </td> <td valign="top"><p>Article 9 describes personal data that are illegal to process unless an exception applies.</p> <p>While libraries determine whether to process special categories of personal data, OCLC discourages the collection and storage of these data in OCLC products by our customers. Collection and storage of these data are not necessary for the use of OCLC products.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 10:</strong> Processing of Personal Data Relating to Criminal Convictions and Offences</p> </td> <td valign="top"><p>Article 10 address the processing of personal data relating to criminal convictions and offenses.</p> <p>Like the special categories of personal data described in Article 9, these personal data are not required for the use of OCLC's products. OCLC discourages the collection and storage of these data in OCLC products.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 11 and 12:</strong> Processing which Does Not Require Identification; Transparent Information, Communication, and Modalities for the Exercise of Rights of the Data Subject</p> </td> <td valign="top"><p>Article 11 contains laws related to the controller's identification of data subjects, including in relation to data subjects exercising rights afforded under the GDPR.</p> <p>Article 12 contains laws about the controller providing information to data subjects, including the deadlines for responding to requests from data subjects.</p> <p>As the controller, it is the library's responsibility to comply with Articles 11 and 12 in its relationships with its patrons and staff members.</p> <p>OCLC receives requests from data subjects, requests information when needed to validate identity, and evaluates what OCLC's role is with respect to the data subject.</p> <p>When OCLC is a controller, OCLC has processes in place for the handling of requests in accordance with the requirements of Article 12.</p> <p>If OCLC determines it is a processor, OCLC directs the data subject to place the request with the controller.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 13 and 14:</strong> Information to be Provided where Personal Data Are Collected from the Data Subject; Information to be Provided where Personal Data Have Not Been Obtained from the Data Subject</p> </td> <td valign="top"><p>Articles 13 and 14 provide specific requirements to be provided to data subjects.</p> <p>When acting as the controller with respect to data subjects, OCLC provides appropriate notice. For example, OCLC publishes a privacy notice on OCLC.org.</p> <p>With respect to library patrons and staff members, the library is the controller and should provide privacy notices that meet the requirements of Articles 13 or 14, as applicable. In addition to the processing performed by OCLC as a processor for a library, a library's notices would likely describe other processing performed by the library and performed by other processors for the library.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 15 – 23:</strong> Right of Access by the Data Subject; Right to Rectification; Right to Erasure ("Right to be Forgotten"); Right to Restriction of Processing; Notification Obligation Regarding Rectification or Erasure of Personal Data or Restriction of Processing; Right to Data Portability; Right to Object; Automated Decision-Making Including Profiling; Restrictions</p> </td> <td valign="top"><p>Articles 15 through 23 are laws associated with various rights of data subjects.</p> <p>As the controller, it is the library's responsibility to comply with Articles 15 through 23, as applicable, in its relationship with its patrons and staff members.</p> <p>OCLC receives requests from data subjects, requests information when needed to validate identity, and evaluates what OCLC's role is with respect to the data subject.</p> <p>When OCLC is a controller, OCLC has processes in place for handling requests.</p> <p>If OCLC determines it is a processor, OCLC directs the data subject to place the request with the controller.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 24:</strong> Responsibility of the Controller</p> </td> <td valign="top"><p>Article 24 lists responsibilities of the data controller, including establishment of appropriate technical and organizational measures and data protection policies.</p> <p>As the controller with respect to data of its patrons and staff members, the library is responsible for complying with Article 24.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 25:</strong> Data Protection by Design and Default</p> </td> <td valign="top"><p>Article 25 requires controllers to implement data protection by design and default.</p> <p>As the controller with respect to data of its patrons and staff members, the library would be responsible for complying with Article 25. OCLC has established formal GDPR projects and other activities focused on our products to help libraries meet these obligations. For example, OCLC has completed a project focused on enabling libraries to display privacy notices for certain products. OCLC is committed to continuing to evaluate our products and to make determinations on whether and how to improve them with respect to data protection by design and default considerations.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 26:</strong> Joint Controllers</p> </td> <td valign="top"><p>Article 26 addresses arrangements between joint controllers.</p> <p>OCLC would not typically be a joint controller with libraries. Libraries are the controllers, and OCLC is a processor.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 27:</strong> Representatives of Controllers or Processors Not Established in the Union</p> </td> <td valign="top"><p>Article 27 is related to the territorial scope of the GDPR when the controller or processor is not established in the EU. When not established in the EU, the controller or processor must appoint a representative physically located in the EU.</p> <p>OCLC has multiple establishments in the EU, and our European headquarters is located in the Netherlands.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 28:</strong> Processor</p> </td> <td valign="top"><p>Article 28 sets forth obligations of both controllers and processors. Article 28 focuses heavily on the establishment of contracts to govern the processing by the processor and the establishment of contracts by that processor when engaging other processors.</p> <p>As a processor for libraries, OCLC has developed data processing agreements for libraries to execute to meet the requirements of Article 28. These contracts are available in multiple languages. Further, OCLC has developed sub-processor agreements to sign when sub-processors are engaged by OCLC.</p> <p>OCLC has made and continues to make efforts to identify libraries it believes are subject to the GDPR and to have those libraries execute data processing agreements. However, note that the requirement to execute this contract does directly apply to libraries subject to the GDPR. If a library is subject to the GDPR and has not executed a contract with OCLC, the library's representative should contact us immediately to receive a copy of the data processing agreement to sign.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 29:</strong> Processing Under the Authority of the Controller or Processor</p> </td> <td valign="top"><p>Article 29 addresses processing by processors. Processors are not to process personal data except on the instruction of the controller.</p> <p>The Article 28 contracts, described above, provide the instructions from the library, as controller, to OCLC for the processing of personal data.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 30:</strong> Records of Processing Activities</p> </td> <td valign="top"><p>Article 30 is a record-keeping requirement with respect to the processing of personal data. There are requirements for both controllers and processors to maintain the records and to provide records to supervisory authorities when requested.</p> <p>OCLC has created and maintains records of processing activities.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 31:</strong> Cooperation with the Supervisory Authority</p> </td> <td valign="top"><p>Article 31 requires controllers and processors, on request, to cooperate with supervisory authorities in the performance of their tasks.</p> <p>OCLC will cooperate with supervisory authorities when requested.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 32:</strong> Security of Processing</p> </td> <td valign="top"><p>Article 32 contains obligations for controllers and processors to implement appropriate technical and organizational measures to ensure an appropriate level of security.</p> <p>OCLC has implemented technical and organizational measures. These are described in the contracts required by Article 28. Additional information about OCLC's security is also available on our website.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 33 and 34:</strong> Notification of a Personal Data Breach to the Supervisory Authority; Communication of a Personal Data Breach to the Data Subject</p> </td> <td valign="top"><p>Articles 33 and 34 contain the obligations of controllers and processors with respect to a personal data breach notification.</p> <p>As a processor, OCLC would notify a library of a related personal data breach under Article 33. This would occur without undue delay after becoming aware of a personal data breach. OCLC reviews incidents quickly and maintains a database of library contact information to help ensure that any required notifications can be made without undue delay. With respect to unavailability, OCLC also encourages libraries to review our <a href="https://oclc.service-now.com/status">System Status dashboard</a> on our website.</p> <p>Libraries, as controllers, would need to determine whether to notify supervisory authorities and data subjects.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 35 and 36:</strong> Data Protection Impact Assessment; Prior Consultation</p> </td> <td valign="top"><p>Articles 35 and 36 contain, in certain circumstances, obligations for controllers to conduct data protection impact assessments and to consult with supervisory authorities.</p> <p>These are obligations of controllers; therefore, the obligations apply to libraries. OCLC is typically a processor for the libraries.</p> <p>In instances in which OCLC is required to complete data protection impact assessments under the GDPR, OCLC has processes in place for their completion.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 37:</strong> Designation of the Data Protection Officer</p> </td> <td valign="top"><p>Article 37 describes the instances in which controllers and processors must appoint data protection officers, including the ability for a group of undertakings to appoint a single data protection officer. The data protection officer must be appointed based on professional qualities, including expert knowledge of data protection law and practices.</p> <p>OCLC has appointed a data protection officer for its various affiliates as a group of undertakings. The current officer holds three certifications from the International Association of Privacy Professionals, including both of the "GDPR Ready" certifications (CIPP/E and CIPM).</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 38 and 39:</strong> Position of the Data Protection Officer; Tasks of the Data Protection Officer</p> </td> <td valign="top"><p>Articles 38 and 39 describe when the data protection officer is to be involved in issues, the data protection officer's independence, and the tasks of the data protection officer.</p> <p>OCLC's data protection officer is assigned to fulfill the tasks of Article 39. Further, OCLC has established a privacy support team to help the data protection officer in the fulfillment of these duties and to help address local issues, as needed. OCLC is committed to ensuring the independence of its data protection officer. If a possible conflict is identified, OCLC's general counsel and data protection officer would discuss the possible conflict and work together to ensure that independence is maintained.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 40 – 43:</strong> Codes of Conduct; Monitoring of Approved Codes of Conduct; Certification; Certification Bodies</p> </td> <td valign="top"><p>These Articles are concerned with promoting associations and other bodies to create and adopt codes of conduct with respect to the GDPR.</p> <p>OCLC is not currently involved in efforts to create codes of conduct.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 44 – 49:</strong> General Principles for Transfer; Transfers on the Basis of an Adequacy Decision; Transfers Subject to Appropriate Safeguards; Binding Corporate Rules; Transfers or Disclosures not Authorized by Union Law; Derogations for Specific Situations</p> </td> <td valign="top"><p>Articles 44 through 49 address various requirements associated with personal data transfers.</p> <p>OCLC's headquarters is in the US. It has offices in many locations, including data centers in the Netherlands, US, Australia, and Canada. Transfers of personal data from the EU may occur.</p> <p>With respect to transfers that require appropriate safeguards, these transfers are pursuant to standard data protection clauses as allowed in Article 46. OCLC executes standard data protection clauses with libraries when signing Article 28 contracts.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 50 – 78:</strong> International Cooperation for the Protection of Personal Data; Supervisory Authority; Independence; General Conditions for the Members of the Supervisory Authority; Rules on the Establishment of the Supervisory Authority; Competence; Competence of the Lead Supervisory Authority; Tasks; Powers; Activity Reports; Cooperation between the Lead Supervisory Authority and Other Supervisory Authorities Concerned; Mutual Assistance; Joint Operations of the Supervisory Authorities; Consistency Mechanism; Opinion of the Board; Dispute Resolution by the Board; Urgency Procedure; Exchange of Information; European Data Protection Board; Independence; Tasks of the Board; Reports; Procedure; Chair; Tasks of the Chair; Secretariat; Confidentiality; Right to Lodge a Complaint with a Supervisory Authority; Right to an Effective Judicial Remedy against a Supervisory Authority</p> </td> <td valign="top"><p>Articles 50 through 78 contain rules regarding member states, their supervisory authorities, and the European Data Protection Board.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 79:</strong> Right to an Effective Judicial Remedy against a Controller or Processor</p> </td> <td valign="top"><p>Article 79 describes the rights of data subjects to seek remedies. This may include court proceedings against controllers or processors where they have an establishment.</p> <p>OCLC is a processor for libraries and could be subject to Article 79 with respect to a library's staff members and patrons. OCLC has establishments within the EU where court proceedings could occur.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 80 and 81:</strong> Representation of Data Subjects; Suspension of Proceedings</p> </td> <td valign="top"><p>These Articles of the GDPR relate to how complaints could be brought by data subjects and how courts could suspend proceedings.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 82:</strong> Right to Compensation and Liability</p> </td> <td valign="top"><p>Article 82 describes how data subjects may seek compensation from controllers and processors.</p> <p>Under Article 82, library staff members and patrons could pursue compensation directly against OCLC as a processor for the library. Article 82 and the contracts between OCLC and a library also allocate responsibilities between OCLC and each library.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 83 and 84:</strong> General Conditions for Imposing Administrative Fines; Penalties</p> </td> <td valign="top"><p>Articles 83 and 84 contain provisions allowing supervisory authorities and Member States to assess administrative fines and other penalties.</p> <p>If OCLC as a processor for libraries were to infringe the GDPR's provisions applicable to processors, OCLC could be subject to assessments of fines or other penalties.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 85 – 90:</strong> Processing and Freedom of Expression and Information; Processing and Public Access to Official Documents; Processing of the National Identification Number; Processing in the Context of Employment; Safeguards and Derogations Relating to Processing for Archiving Purposes in the Public Interest, Scientific or Historical Research Purposes or Statistical Purposes; Obligations of Secrecy</p> </td> <td valign="top"><p>Articles 85 through 90 contain various requirements for and rights of Member States, such as reconciling the GDPR with rights of freedom of expression and allowing Member States to create more specific rules in the context of processing employment data.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Article 91:</strong> Existing Data Protection Rules of Churches and Religious Associations</p> </td> <td valign="top"><p>Article 91 contains laws that apply to churches and religious associations.</p> <p>Article 91 is not applicable to OCLC, as it is not a church or religious association.</p> </td> </tr> <tr> <td width="250" valign="top"><p><strong>Articles 92 – 99:</strong> Exercise of the Delegation; Committee Procedure; Repeal of Directive 95/46/EC; Relationship with Directive 2002/58/EC; Relationship with Previously Concluded Agreements; Commission Reports; Review of Other Union Legal Acts on Data Protection; Entry into Force and Application</p> </td> <td valign="top"><p>These Articles address the operation and effectiveness of the GDPR.</p> <p>The GDPR became effective on 25 May 2018.</p> </td> </tr> </tbody> </table> </div> </div> </div> </div> </div> <div class="cont-page extra-info"> <div class="purposestmt iparsys parsys"><div class="section"><div class="new"></div> </div><div class="iparys_inherited"><div class="purposestmt iparsys parsys"></div> </div> </div> </div> </div> </div> <div class="footer iparsys parsys"><div class="section"><div class="new"></div> </div><div class="iparys_inherited"><div class="footer iparsys parsys"><div class="footer section">  <footer class="page-footer">  <div class="cont-page"> <div class="par parsys"><div class="parsyscolumncontrol section"> <div class="parsys_column cq-colctrl-lt6"> <div class="parsys_column cq-colctrl-lt6-c0"> <div class="col0 parsys"><div class="globallogo parbase section">  <a href="https://www.oclc.org/en/home.html"> <img src="/content/dam/oclc/design-images/navigation-logo.svg" border="0" title="OCLC.org 首頁" alt="OCLC 標誌" class="footer-logo"> </a> </div> </div> </div> <div class="parsys_column cq-colctrl-lt6-c1"> <div class="col1 parsys"><div class="languagenavigation section"> <nav id="languagenavigation-9638b7fec9" class="cmp-languagenavigation"> <ul class="cmp-languagenavigation__group"> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-en cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="en" lang="en" rel="alternate" href="/content/legal/admin.html">Admin</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--countrycode-SA cmp-languagenavigation__item--langcode-ar-SA cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="ar-SA" lang="ar-SA" rel="alternate" href="https://policies.oclc.org/ar/privacy/gdpr-analysis.html.html">العربية</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-ca cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="ca" lang="ca" rel="alternate" href="https://policies.oclc.org/ca/privacy/gdpr-analysis.html">català</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-en cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="en" lang="en" rel="alternate" href="https://policies.oclc.org/cs/privacy/gdpr-analysis.html">Čeština</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--countrycode-DE cmp-languagenavigation__item--langcode-de-DE cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="de-DE" lang="de-DE" rel="alternate" href="https://policies.oclc.org/de/privacy/gdpr-analysis.html">Deutsch</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--countrycode-US cmp-languagenavigation__item--langcode-en-US cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="en-US" lang="en-US" rel="alternate" href="https://policies.oclc.org/en/privacy/gdpr-analysis.html">English</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--countrycode-ES cmp-languagenavigation__item--langcode-es-ES cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="es-ES" lang="es-ES" rel="alternate" href="https://policies.oclc.org/es/privacy/gdpr-analysis.html">Español</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-eu cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="eu" lang="eu" rel="alternate" href="https://policies.oclc.org/eu/privacy/gdpr-analysis.html">Euskara</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--countrycode-FR cmp-languagenavigation__item--langcode-fr-FR cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="fr-FR" lang="fr-FR" rel="alternate" href="https://policies.oclc.org/fr/privacy/gdpr-analysis.html">Français</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--countrycode-IT cmp-languagenavigation__item--langcode-it-IT cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="it-IT" lang="it-IT" rel="alternate" href="https://policies.oclc.org/it/privacy/gdpr-analysis.html">Italiano</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-en cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="en" lang="en" rel="alternate" href="https://policies.oclc.org/ja/privacy/gdpr-analysis.html">日本語</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-en cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="en" lang="en" rel="alternate" href="https://policies.oclc.org/ko/privacy/gdpr-analysis.html">한국어</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-en cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="en" lang="en" rel="alternate" href="https://policies.oclc.org/mi/privacy/gdpr-analysis.html">Māori</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--countrycode-NL cmp-languagenavigation__item--langcode-nl-NL cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="nl-NL" lang="nl-NL" rel="alternate" href="https://policies.oclc.org/nl/privacy/gdpr-analysis.html">Nederlands</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-pl cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="pl" lang="pl" rel="alternate" href="https://policies.oclc.org/pl/privacy/gdpr-analysis.html">polski</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--countrycode-PT cmp-languagenavigation__item--langcode-pt-PT cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="pt-PT" lang="pt-PT" rel="alternate" href="https://policies.oclc.org/pt/privacy/gdpr-analysis.html">Português</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-en cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="en" lang="en" rel="alternate" href="https://policies.oclc.org/ru/privacy/gdpr-analysis.html">Pусский</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-en cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="en" lang="en" rel="alternate" href="https://policies.oclc.org/sv/privacy/gdpr-analysis.html">Svenska</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-en cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="en" lang="en" rel="alternate" href="https://policies.oclc.org/th/privacy/gdpr-analysis.html">ไทย</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--countrycode-CN cmp-languagenavigation__item--langcode-zh-CN cmp-languagenavigation__item--level-0"> <a class="cmp-languagenavigation__item-link" hreflang="zh-CN" lang="zh-CN" rel="alternate" href="https://policies.oclc.org/zh-Hans/privacy/gdpr-analysis.html">简体中文</a> </li> <li class="cmp-languagenavigation__item cmp-languagenavigation__item--langcode-en cmp-languagenavigation__item--level-0 cmp-languagenavigation__item--active"> <a class="cmp-languagenavigation__item-link" hreflang="en" lang="en" rel="alternate" href="https://policies.oclc.org/zh-Hant/privacy/gdpr-analysis.html">繁體中文</a> </li> </ul> </nav> </div> <div class="text parbase section"> <div class="copyright"> <p><span class="cq-rte-sprinkles" name="Sprinkles:copyright-current-year"><a href="https://policies.oclc.org/zh-Hant/copyright.html" title="閱讀 OCLC 版權政策">© 2024 OCLC</a></span> <a href="https://policies.oclc.org/zh-Hant/copyright/trademarks.html" title="檢視 OCLC 及其附屬機構的商標與服務標章">OCLC, Inc. 及其附屬機構的國内與國際商標和/或服務標章</a></p> <ul> <li><a href="https://policies.oclc.org/zh-Hant/privacy/privacy-statement.html">隱私權條款</a></li> <li><a href="https://policies.oclc.org/zh-Hant/privacy/cookie-statement.html">Cookie 通知</a></li> <li><a id="ot-sdk-btn" class="ot-sdk-show-settings">Cookie 設定</a></li> <li><a href="https://policies.oclc.org/zh-Hant/accessibility.html">協助工具聲明</a></li> <li><a href="https://www.oclc.org/en/trust/compliance.html#trust-certifications">ISO 27001 認證</a></li> </ul> </div> </div> </div> </div> </div></div> </div> <div style="clear: both"></div> </div> <div class="connect-bar mod"> <div class="cont-page">  </div> </div>  <div class="cont-page copyright"> <div class="text parbase"> </div> </div> </footer> <script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script> (function ($) { $(function() { yepnope({ test: ($(".event-listing-show").length), yep: ['/apps/settings/wcm/designs/oclc/js/event-functions-v0.2.js'] }); }); })(jQuery); </script> </div> </div> </div> </div> <script type="text/javascript"> (function ($) { $(function () { yepnope([{ }, { test: (window.location.href.indexOf("search-results") != -1), nope: ['/apps/settings/wcm/designs/oclc/syntaxhighlighter/shCore.js', '/apps/settings/wcm/designs/oclc/syntaxhighlighter/shAutoloader.js'], complete: function () { SyntaxHighlighter.autoloader('java /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushJava.js', 'js jscript javascript /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushJScript.js', 'plain text /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushPlain.js', 'bash /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushBash.js', 'csharp /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushCSharp.js', 'css /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushCss.js', 'groovy /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushGroovy.js', 'perl pl /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushPerl.js', 'php /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushPhp.js', 'python py /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushPython.js', 'ruby /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushRuby.js', 'sql /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushSql.js', 'xml /apps/settings/wcm/designs/oclc/syntaxhighlighter/shBrushXml.js'); SyntaxHighlighter.all(); } }]); }); }(jQuery)); </script> </body> </html>

CINXE.COM

OCLC's Response to the General Data Protection Regulation