Freedom of Information Act (FOIA)

There is no “Right to Know” Amendment. No sentence in the Constitution that promises citizens a window into the files of the federal government.

That said, American law does recognize limited access rights in certain settings, and many states have their own “right to know” language in statutes and constitutions. But at the federal level, the day-to-day right to demand records is mostly a statutory creation, not a constitutional clause.

And yet, modern American self-government depends on something like that window existing. We argue about wars, surveillance, public health, corruption, and elections as if the evidence should be available to the people. The Freedom of Information Act, better known as FOIA, is the law that tries to make that assumption real.

FOIA is not a magic spell. It is a process, a set of deadlines, and a list of exceptions that agencies invoke with varying levels of enthusiasm. But it is also one of the most powerful tools ordinary citizens have to force the government to explain itself using its own records.

What FOIA is

FOIA is a federal transparency law passed in 1966 and signed by President Lyndon B. Johnson. It gives any person the right to request access to existing records held by federal executive branch agencies, unless the records fall within one of FOIA’s exemptions or exclusions.

That scope matters. FOIA is aimed at the part of government that runs programs, enforces laws, regulates industries, and produces mountains of paperwork.

• Who can use FOIA? Anyone. You do not need to be a U.S. citizen.
• Who must respond? Federal executive agencies and certain federal components that qualify as “agencies” under FOIA.
• What does FOIA give you? Records, not custom explanations. If it is not already in a record, FOIA is not required to manufacture it.

What FOIA covers and what it does not

FOIA applies to federal agencies

FOIA generally applies to agencies within the executive branch, including departments like Justice, State, Defense, and Homeland Security, and independent agencies like the EPA, SEC, and CIA.

FOIA does not directly apply to Congress, the courts, or most of the White House

• Congress: Not covered by FOIA. Congressional records are governed by internal rules, committee practices, and separate disclosure statutes.
• Federal courts: Not covered by FOIA. Court records are typically public through court rules and systems like PACER, but that is a different access regime.
• The White House and the Executive Office of the President (EOP): FOIA does not apply to the President’s immediate personal staff and EOP units whose sole function is to advise and assist the President. Some EOP components can be covered depending on whether they qualify as an “agency” under FOIA, so it is not a categorical “never,” but many of the most recognizable White House offices are outside FOIA’s reach. Separate laws like the Presidential Records Act govern many presidential records after a presidency ends.

FOIA is about existing records

Agencies do not have to:

• Answer questions that require new analysis or explanations they have not already written down.
• Create new documents to satisfy your request.
• Do research for you.

“Records” can still be broad

FOIA can reach:

• Emails and attachments
• Memoranda, reports, and meeting notes
• Contracts, grant files, and inspection records
• Databases and spreadsheets (often produced as exports)
• Policies, guidance documents, and training materials
• Photographs, videos, and audio recordings

What you can request

If you can describe it, you can usually request it. The trick is to aim at the kinds of records agencies reliably keep and can reasonably search.

Requests that often work

• Policies and guidance: internal manuals, standard operating procedures, inspector checklists.
• Communications: emails between named officials about a defined topic during a defined time window.
• Enforcement and compliance: inspection results, warning letters, settlement agreements.
• Spending: contracts, invoices, grant awards, statements of work.
• Decision records: final memos, briefing documents, and talking points used to support an agency action.

Requests that are too broad (and quick fixes)

• “All records about immigration” (try: “emails from [office] between [dates] containing keywords [X, Y, Z]”)
• “Any documents related to surveillance” (try: “policy memos and training materials on [program name] issued between [dates]”)
• “Everything you have on me” (often better handled as a combined FOIA and Privacy Act request)

FOIA and personal files

FOIA can be used to request records that mention you, but there is a separate federal law, the Privacy Act of 1974, that sometimes provides stronger access rights for individuals seeking records about themselves. Many agency portals let you file a combined FOIA and Privacy Act request.

A simple FOIA request template

Use this as a starting point and customize it:

“This is a request under the Freedom of Information Act. I request copies of [record types] regarding [topic], created or sent between [start date] and [end date], including records maintained by [office/custodian names] and using keywords [keywords] where applicable. Please provide records in electronic form. If fees will exceed $[amount], please contact me before processing. I request a fee waiver because disclosure is in the public interest and I intend to [publish/share/use].”

The 9 FOIA exemptions

FOIA’s promise is not “disclose everything.” It is “disclose what you can, withhold what you must.” The withholding rules live in nine exemptions.

Exemption 1: Classified national security information

Records properly classified under an executive order in the interest of national defense or foreign policy can be withheld. This is the exemption most associated with intelligence agencies, but it can appear across the government.

Exemption 2: Internal personnel rules and practices

After Milner, this exemption is largely limited to genuine internal employee rules and practices. Material that agencies once tried to withhold under a broader reading of Exemption 2 is now more commonly argued under other exemptions, such as Exemption 7(E) in law enforcement contexts.

Exemption 3: Withholding required by another statute

This is FOIA’s “other law controls” exemption. If Congress passes a separate statute that specifically requires certain information to be withheld, agencies can invoke Exemption 3. When a qualifying statute applies, withholding is generally not discretionary.

Exemption 4: Trade secrets and confidential commercial information

Protects sensitive business information submitted to the government, such as proprietary data or competitively harmful material. This exemption is often litigated because it sits at the boundary between public oversight and private market harm.

Exemption 5: Privileged inter- or intra-agency communications

This is where the government often fights hardest. Exemption 5 incorporates civil discovery privileges, including:

• Deliberative process privilege (predecisional, deliberative discussions)
• Attorney-client privilege
• Attorney work product

Exemption 6: Personal privacy

Protects information in personnel, medical, and similar files where disclosure would be a clearly unwarranted invasion of personal privacy. It requires a balance between privacy interests and the public interest in disclosure.

Exemption 7: Law enforcement records

Covers certain records compiled for law enforcement purposes, with several subparts, including:

• 7(A) interference with enforcement proceedings
• 7(B) deprivation of a fair trial
• 7(C) unwarranted invasion of personal privacy
• 7(D) disclosure of confidential sources
• 7(E) revealing investigative techniques or guidelines
• 7(F) endangering life or physical safety

Exemption 8: Financial institutions

Protects information related to the supervision of financial institutions, such as bank examination reports.

Exemption 9: Wells

Protects geological and geophysical information concerning wells, such as certain oil and gas data.

Important: FOIA still leans toward disclosure. Agencies must release any reasonably segregable non-exempt portions of a record, even if other parts are withheld. Some exemptions can involve judgment calls, but others function more like hard stops in practice, especially privacy protections and Exemption 3 statutes.

FOIA exclusions

Separate from exemptions, FOIA has three narrow “exclusions” that allow agencies, in limited circumstances, to treat certain law enforcement and national security records as if they do not exist. These are uncommon in routine civilian requests, but they matter in cases involving confidential informants, ongoing criminal investigations, or certain FBI records.

Glomar responses

In some cases, an agency may say it can “neither confirm nor deny” whether records exist. This is commonly called a Glomar response. It is not an “exclusion” by name, but it is a real-world FOIA move you may encounter, often tied to national security or sensitive law enforcement records.

How to file a FOIA request

Filing FOIA is easier than it looks. Winning FOIA is the part that takes planning.

Step 1: Identify the right agency

FOIA is not “to the federal government.” It is to a specific agency, and often a specific component, such as FBI within DOJ, or CBP within DHS.

• Ask: Who created the record?
• Ask: Who would keep the official file?

Step 2: Check what is already posted

FOIA is not only reactive. It also includes affirmative publication duties. Agencies are required to make certain categories of records available for public inspection, including final opinions, policy statements, and frequently requested records (often through online “reading rooms”).

Before you file, search for:

• FOIA libraries and reading rooms
• Inspector General reports
• Public contract databases
• Policy guidance repositories

Step 3: Write a request that is searchable

The most effective FOIA requests usually include:

• Date range: “January 1, 2024 through December 31, 2024”
• Record types: emails, memos, reports, contracts, photographs
• Custodians: names or offices likely to have the records
• Keywords: the subject terms you want searched
• Format: ask for electronic copies where possible

Step 4: Request a fee waiver if you qualify

FOIA fees can include search time, duplication, and in some cases review time. As a practical matter, review fees are mainly charged to commercial requesters. Journalists, educators, researchers, and public interest requesters often seek waivers, but you typically need to explain how you will use and share the information.

Step 5: Ask for expedited processing if there is urgency

FOIA allows expedited processing in limited circumstances, often involving an urgency to inform the public about an actual or alleged federal government activity, particularly for requesters primarily engaged in disseminating information.

Step 6: Submit through the right channel

Most agencies accept requests through online FOIA portals, as well as by email or mail. FOIA.gov is a useful starting point for finding agency contacts and learning agency-specific submission rules.

Step 7: Track and negotiate

Once you have a tracking number, save it. Keep copies of what you submitted and every response. Also, do not underestimate the value of basic back-and-forth with the FOIA office. Many requests speed up when you negotiate scope, clarify custodians, or agree on staged production.

FOIA timelines

By statute, agencies generally must determine whether to comply within 20 business days after receiving a request.

In practice, that number is a starting point, not a finish line.

Why FOIA takes longer

• Backlogs: many FOIA offices are understaffed.
• Consultations and referrals: one agency may need to consult another before releasing records.
• Search complexity: large email collections, multiple custodians.
• Sensitive review: classified information, law enforcement files, or heavy privacy redactions.

Extensions for unusual circumstances

FOIA permits agencies to extend the deadline in certain “unusual circumstances.” The statute specifically contemplates an extension of up to 10 working days with proper notice, and agencies often request narrowing to speed processing.

Estimated dates and rolling releases

Some agencies provide an estimated completion date. Others process in stages, releasing batches of records over time. If your request is large, consider asking for rolling productions or a prioritized first batch.

If your request is denied or redacted

A denial is not the end. It is often the beginning of the part of FOIA that has teeth.

1) Read the letter like a map

Agencies must generally cite the exemptions relied upon and explain, at least in a meaningful way, why the exemption applies. Look for:

• which exemptions were used
• whether the agency claims it found “no responsive records”
• whether it refused to search because the request was too broad
• whether it withheld records in full or released some with redactions
• whether it issued a Glomar response

2) Appeal inside the agency

Before suing, you usually must file an administrative appeal. Deadlines vary by agency (often 60 or 90 days), so check your letter. This is part of “exhausting” administrative remedies, a step that typically matters if you later go to court.

In an appeal, you can argue:

• the search was inadequate
• the exemptions were misapplied
• the agency failed to release segregable portions
• the public interest outweighs privacy in specific contexts

3) Consider mediation through OGIS

The Office of Government Information Services (OGIS), housed within the National Archives, offers mediation services to resolve FOIA disputes. It is not a court, but it can help break logjams.

4) Sue in federal court

FOIA includes a cause of action. If an agency wrongfully withholds records, a requester can file suit in federal district court. Courts can review agency declarations, order additional searches, and compel release when exemptions do not apply.

5) Refine and refile

Sometimes the smartest move is tactical rather than confrontational. If you are getting “no responsive records” responses or sweeping redactions, file narrower requests that target:

• specific dates around a known event
• particular officials involved
• final memoranda rather than drafts
• record types that are likely to be publicly releasable

Landmark FOIA cases

FOIA is statutory, but it lives through litigation. Some of the most important rules about what the public can see were written by courts in FOIA disputes.

EPA v. Mink (1973)

One of the early Supreme Court battles over classified materials. The decision limited judicial review of classification claims under then-existing law, and it helped drive later reforms strengthening FOIA’s structure for handling national security withholdings.

Department of the Air Force v. Rose (1976)

The Court held that the Air Force had to release summaries of honor and ethics hearings at the Air Force Academy with identifying details removed. It is a foundational example of FOIA’s preference for disclosure through redaction rather than total withholding.

NLRB v. Robbins Tire & Rubber Co. (1978)

A leading case on Exemption 7. The Court allowed withholding of witness statements in an ongoing enforcement proceeding because disclosure could interfere with the case. It illustrates why timing often matters in FOIA.

DOJ v. Reporters Committee for Freedom of the Press (1989)

One of the most consequential privacy cases under FOIA. The Court treated compiled criminal history information as implicating strong privacy interests and emphasized that FOIA’s “public interest” is about shedding light on what the government is doing, not simply satisfying curiosity about private citizens.

U.S. Department of Justice v. Landano (1993)

The Court rejected a broad presumption that all FBI sources are automatically confidential. Agencies often must show why a source should be treated as confidential under Exemption 7, rather than relying on blanket assumptions.

National Archives and Records Administration v. Favish (2004)

The Court recognized significant family privacy interests in death-scene images and set a high bar for requesters seeking such materials, particularly when alleging government misconduct. It is a key modern case on how privacy can limit disclosure.

Milner v. Department of the Navy (2011)

The Court narrowed how agencies can use Exemption 2, rejecting an expansive reading that had allowed withholding of a wide range of internal information. It is an example of the Court forcing FOIA exemptions back into their textual limits.

Food Marketing Institute v. Argus Leader Media (2019)

A major shift for Exemption 4. The Court adopted a more business-friendly test for when commercial information is “confidential,” making it easier for agencies to withhold certain information provided by private companies.

FOIA in real life

Some of the most famous disclosures in American history are tied to transparency fights, even when the legal tool was not technically FOIA at the moment.

• The Pentagon Papers (1971): Released to the public by the press and defended under the First Amendment in New York Times Co. v. United States. Not a FOIA case, but a reminder that transparency is often a constitutional conflict as much as a statutory one.
• Post-Watergate reforms: Congress strengthened FOIA in 1974 over President Gerald Ford’s veto after the political shock of Watergate and the broader demand for accountability.
• Modern disclosure culture: FOIA requests have been central to reporting on surveillance, detention policies, regulatory capture, environmental enforcement, and how agencies actually implement laws away from cameras.

The pattern is consistent. FOIA rarely produces a single cinematic “smoking gun.” More often it produces paper trails, and paper trails are how democracies prove what they claim to be.

Federal FOIA vs. state records laws

FOIA is a federal law. It does not automatically open state or local records.

State public records laws

Every state has its own version of open records legislation, often called:

• Public Records Acts
• Open Records Acts
• Sunshine laws
• Freedom of Information laws (state FOI)

Key differences

• Different deadlines: some states require faster responses than federal FOIA, at least on paper.
• Different exemptions: the categories overlap, but the details vary.
• Different enforcement: some states have independent records commissions or ombuds offices; others require litigation quickly.
• Different coverage: state laws often apply to governors’ offices, legislatures, school boards, police departments, and city agencies in ways federal FOIA does not.

Rule of thumb

If the record was created by a:

• federal agency, use federal FOIA
• state agency, county office, city department, public school district, use the state’s open records law

FOIA checklist

• Define the record (what, who, when).
• Narrow the time range to weeks or months, not decades.
• Name custodians or offices likely to hold the file.
• Ask for electronic production and rolling releases.
• Request a fee waiver if you are publishing or educating.
• Keep everything (tracking number, emails, letters).
• Appeal on the record and cite the exemptions used.
• Use OGIS when you need a neutral mediator.

Why FOIA still fits

The Constitution is built on a theory that power needs sunlight, checks, and friction. But the document does not micromanage transparency. It assumes institutions will compete, courts will enforce, and citizens will stay alert.

FOIA is one of the ways modern America tries to keep that bargain. It turns curiosity into a legal right, and it turns government paperwork into something the public can demand instead of merely hope for.

That does not make FOIA perfect. It makes it essential. Not because it guarantees truth, but because it gives the public a way to verify what officials claim, using the government’s own files as witnesses.