What does the foreseeable harm standard require an agency to show before withholding records under a FOIA exemption?

The federal Freedom of Information Act (FOIA) creates a presumption of openness. Even when records technically fall within one of FOIA’s exemptions, an agency cannot withhold them by reflex. Under the foreseeable harm standard, the agency must take a second step: show that disclosure would actually cause harm.

Two questions, not one

When an agency reviews records for release, the foreseeable harm standard adds a distinct test on top of the exemption analysis:

• Does an exemption apply? The agency identifies whether the information fits one of FOIA’s nine exemptions (for example, privacy, law enforcement, or pre-decisional deliberative material).
• Would release actually cause harm? The agency must then determine that disclosure would foreseeably harm an interest the exemption is designed to protect — or that disclosure is otherwise prohibited by law.

If the agency cannot articulate that harm, the record should be released even though an exemption could arguably be invoked.

What the agency must show

To withhold under this standard, an agency generally must:

• Articulate a specific, foreseeable harm, tied to the particular records at issue — not a generalized or speculative concern.
• Connect the harm to the exemption’s purpose, explaining how release would damage the interest that exemption protects.
• Consider partial release. Agencies are expected to release any reasonably segregable, non-harmful portions of a record and redact only what genuinely warrants protection.

In short, the existence of an exemption is a ceiling, not a command. The standard pushes agencies toward disclosing more, and toward explaining their withholdings in concrete terms rather than boilerplate.

Practical takeaways for requesters

If a response withholds records, you can reasonably expect the agency to explain why release would cause harm, not merely cite an exemption number. A bare citation, without a foreseeable-harm explanation, is a fair basis to seek clarification, request mediation through the Office of Government Information Services, or file an administrative appeal.

Agencies generally have 20 business days to make an initial determination on a federal FOIA request, though processing of voluminous or complex requests can take longer. Note that state public-records laws differ: many have their own standards, exemptions, and timelines, so the foreseeable harm framework described here applies to the federal FOIA.

Learn more about related concepts on our FOIA and public records topic page.