What are the three FOIA exclusions under (c)(1)-(c)(3), and how do they differ from exemptions?

The federal Freedom of Information Act (FOIA) contains two very different tools agencies use to protect sensitive information: exemptions and exclusions. They are often confused, but they operate in opposite ways. (For background on how FOIA fits into the broader records landscape, see FOIA and public records.)

The three exclusions: (c)(1)-(c)(3)

The exclusions appear in subsection (c) of the statute and are narrow. They apply only to specially sensitive law enforcement and national security records:

• (c)(1) — Protects an ongoing criminal investigation when the subject is unaware of it and disclosure could reasonably be expected to interfere with enforcement proceedings.
• (c)(2) — Protects the existence of confidential informant records maintained by a criminal law enforcement agency, when the informant’s status has not been officially confirmed.
• (c)(3) — Protects certain FBI records concerning foreign intelligence, counterintelligence, or international terrorism that remain classified.

How exclusions differ from exemptions

There are nine FOIA exemptions (subsection (b)) covering categories such as classified national security information, personal privacy, and law enforcement records. The key difference is in how an agency may respond:

• With an exemption, the agency acknowledges that responsive records exist but withholds some or all of the content, citing the applicable exemption. The requester knows records were located.
• With an exclusion, the law allows the agency to treat the specially protected records as not subject to FOIA at all. In practice, the agency may respond that no responsive records exist, protecting the very fact that the records exist.

In short, exemptions withhold content while confirming records exist; exclusions protect the existence of records in narrowly defined situations. Exclusions are rare and tightly limited to the three scenarios above.

What requesters should know

If you receive a “no records” response, it usually means none were found, not that an exclusion was invoked. Exclusions apply only to a small set of law enforcement and intelligence records.

Agencies generally have 20 business days to respond to a FOIA request, though processing of actual records can take longer. Note that this discussion concerns the federal FOIA; state public-records laws vary, and many do not use the exclusion concept at all. If you have a dispute, the Office of Government Information Services (OGIS) offers mediation assistance.