Patron privacy is protected by Colorado Statute 24-90-119 of the Colorado Library Law: Privacy of user records.
"(1) Except as set forth in subsection (2) of this section, a publicly supported library or library system shall not disclose any record or other information which identifies a person as having requested or obtained specific materials or service or as otherwise having used the library."
"(2) Records may be disclosed in the following instances:
(a) When necessary for the reasonable operation of the library;
(b) Upon written consent of the user;
(c) Pursuant to subpoena, upon court order, or where otherwise required by law."