Glomar Responses: Neither Confirm Nor Deny

Most responses to a Freedom of Information Act (FOIA) request fall into familiar categories: the agency releases records, withholds some or all of them under an exemption, or reports that a reasonable search located no responsive records. A Glomar response is different in kind. With it, an agency declines even to confirm or deny that responsive records exist. It is not “we found nothing” and it is not “we found something but cannot release it” — it is a refusal to reveal which of those situations is true, because the answer itself would cause the harm a FOIA exemption is designed to prevent.

The Glomar response is one of the more misunderstood tools in public-records practice. It sounds like an evasion, but it is a narrow, exemption-bound mechanism that courts have recognized for decades. Understanding when it applies, why it exists, and how it is reviewed helps records and information-governance professionals respond accurately and set honest expectations with requesters.

Where the name comes from

The term traces to litigation in the 1970s over a vessel widely reported as the Glomar Explorer, a ship connected to a covert effort to recover a sunken submarine. When journalists sought records, the responding agency argued that merely admitting whether such records existed would itself disclose classified intelligence activities. A federal court accepted that confirming or denying the existence of records could, in some circumstances, reveal the very information an exemption protects. The shorthand “Glomarization” stuck, and the response has been part of FOIA practice ever since.

The legal basis: an exemption applied to existence itself

A Glomar response is not a freestanding power. It must be anchored in one of FOIA’s nine statutory exemptions, just as an ordinary withholding must be. The difference is what the exemption is being applied to. In a normal denial, the exemption protects the contents of a record. In a Glomar response, the exemption protects the fact that a record exists or does not exist.

The exemptions most commonly invoked for Glomar responses are:

• Exemption 1 (national security) — when acknowledging records would reveal classified intelligence sources, methods, or activities.
• Exemption 7 (law enforcement) — when confirming the existence of records would, for example, reveal whether a person is under investigation.
• Exemptions 6 and 7(C) (personal privacy) — when even admitting that an agency holds records about a named individual would itself be an unwarranted invasion of that person’s privacy.

The logic is consistent across all of them: if “yes, we have records” and “no, we have none” each disclose something the exemption is meant to shield, then the only protective answer is to say neither. The classification framework that underlies Exemption 1 — the rules governing what may be classified and why — is overseen at the executive level by the Information Security Oversight Office (ISOO).

What a Glomar response must do

A proper Glomar response is disciplined, not a blanket refusal. Agencies are generally expected to:

• Tie the response to a specific exemption. The agency identifies which exemption justifies refusing to confirm or deny, and explains the category of harm.
• Avoid revealing through inconsistency. A Glomar invocation must be applied evenhandedly. If an agency confirms records in one case and Glomarizes a nearly identical request in another, the inconsistency can itself signal the answer and undermine the position.
• Provide appeal rights. Like any adverse determination, a Glomar response must inform the requester of the right to administratively appeal and, ultimately, to seek judicial review.
• Justify the response to a court if challenged, typically through a declaration explaining why acknowledging existence would cause cognizable harm — without disclosing the protected fact in the public record.

Limits, waiver, and the “official acknowledgment” doctrine

A Glomar response is not permanent or absolute. Courts scrutinize it, and several principles constrain it. The most important is official acknowledgment: if the existence of the records has already been officially and publicly confirmed by the government, the agency generally cannot later refuse to confirm or deny that same fact. Unofficial leaks, media speculation, or statements by people outside the agency usually do not waive the protection, but an official disclosure can.

Agencies are also expected to consider segregability in spirit — if part of a request can be answered without causing harm, a complete Glomar response over the entire request may be inappropriate. And because FOIA rests on a presumption of openness and a foreseeable-harm standard, the agency carries the burden of showing that confirming or denying existence would actually cause the harm the exemption guards against, rather than asserting it reflexively.

Why recordkeeping still matters

It is tempting to think a Glomar response makes the underlying records irrelevant — after all, nothing is released and existence is never confirmed. The opposite is true. To defend a Glomar response, an agency must internally know exactly what it holds, how it is classified or protected, and why acknowledgment would be harmful. That requires reliable recordkeeping: accurate inventories, consistent classification and handling markings, and clear documentation of the basis for the response, all maintained so the position can be justified to a reviewing court years later.

Sound records management practices — applied consistently and supported by current federal guidance — are what let an agency Glomarize defensibly in one matter and release fully in another without contradiction. (Notably, NARA in 2022 revoked its endorsement of the DoD 5015.2 standard in favor of the Universal Electronic Records Management Requirements developed through the Federal Electronic Records Modernization Initiative, reflecting a shift toward functional, system-agnostic recordkeeping expectations.) For requesters, recognizing a Glomar response for what it is — a narrow, exemption-bound refusal rather than a dodge — clarifies what can realistically be challenged on appeal. You can explore related material on the FOIA and public records hub.