What are the nine FOIA exemptions?
The Freedom of Information Act (FOIA) presumes that federal records should be released to the public on request. That presumption gives way only when information falls within one of nine specific exemptions. Agencies must still release any reasonably segregable, non-exempt portion of a record, redacting only the protected material.
The nine exemptions
- National security — information properly classified to protect national defense or foreign policy.
- Internal personnel rules and practices — records related solely to an agency’s internal personnel matters.
- Information exempted by other statutes — material that another federal law specifically prohibits from disclosure.
- Trade secrets and confidential commercial or financial information obtained from a person.
- Privileged inter- or intra-agency communications — the “deliberative process,” attorney-client, and attorney work-product privileges.
- Personal privacy — personnel, medical, and similar files whose disclosure would be a clearly unwarranted invasion of personal privacy.
- Law enforcement records — information that could, for example, interfere with proceedings, deprive someone of a fair trial, invade privacy, reveal sources, or endanger safety.
- Financial institution supervision — records related to the regulation of financial institutions.
- Geological information — geological and geophysical data, including maps, concerning wells.
How exemptions are applied
An exemption is a permission to withhold, applied carefully and narrowly. Reviewers examine responsive records line by line, withholding only what an exemption genuinely covers and releasing the rest. When information is withheld, the agency must indicate the amount withheld and the exemption relied on, unless doing so would itself harm a protected interest.
Why recordkeeping matters here
FOIA exemptions only come into play after an agency has found the responsive records. An agency that cannot locate its records cannot apply the exemptions correctly or respond on time. Sound records management — well-organized, well-retained, findable records — is what makes accurate, timely, and defensible FOIA responses possible.
Most U.S. states have their own public-records laws with comparable (though not identical) categories of exempt information, so the specifics vary outside the federal context.
Sources & further reading
Authoritative government and non-profit references.
- FOIA exemptions — U.S. Department of Justice / FOIA.gov
How to cite this page
APA
RM University Editorial. (2026). What are the nine FOIA exemptions?. Records Management University. https://www.recordsmgmt.org/questions/what-are-the-nine-foia-exemptions/
MLA
RM University Editorial. "What are the nine FOIA exemptions?." Records Management University, 1 March 2026, www.recordsmgmt.org/questions/what-are-the-nine-foia-exemptions/.
Related questions
- Am I supposed to get an acknowledgement letter after I file a FOIA request, and what should it contain?
- Are emails on a city council member's personal phone subject to state public records law?
- Are police body-camera footage and incident reports public records under state law?
- Are state university student disciplinary records subject to public records requests, or does FERPA block them?
- Can a business stop an agency from releasing its confidential information under FOIA (reverse FOIA)?