Well, any good user database contains personal information such as adress and phone number, but librarians typically have to sign a secrecy and integrity agreement. Any miss-use of such information is at least a breach of employment contract, and possibly even illegal... which doesn't mean that...