FOIA & Public Records

Few areas of records management connect everyday administrative practice to constitutional principle as directly as public-records law. The federal Freedom of Information Act (FOIA) and the public-records statutes of all fifty states rest on a simple premise: in a democracy, the records created and held by government belong, presumptively, to the people. Access is the default; secrecy is the exception that must be justified. For the records professional, this transforms recordkeeping from an internal housekeeping function into a public-facing legal obligation. Every email retained, every report filed, and every dataset maintained may one day be the subject of a request from a journalist, a researcher, a litigant, or an ordinary citizen — and the speed and completeness of the response will depend almost entirely on how well those records were managed long before the request arrived.

This hub introduces the law, mechanics, and recordkeeping discipline that govern access to public information. It is the starting point for understanding how a request moves through an agency, what may lawfully be withheld, how disputes are resolved, what access costs, and how the patchwork of state laws compares to the federal model. Throughout, the recurring theme is that good information governance is not a separate activity from compliance — it is the precondition for it.

What FOIA and Public-Records Law Are, and Why They Matter

Enacted at the federal level in 1966 and amended repeatedly since, FOIA gives any person — regardless of citizenship — the right to request records from federal executive-branch agencies. It does not reach Congress, the federal courts, or, in most respects, the President’s immediate staff, and it applies only to records that already exist; agencies are not obligated to create new records, answer questions, or conduct research to satisfy a request. Public-records law matters because access is the mechanism through which accountability becomes operational. Without an enforceable right to see how decisions were made, how money was spent, and what government knew and when, oversight by the press, the courts, and the public would be largely symbolic. For agencies, the obligation also reshapes incentives: records must be created, captured, and retained in ways that anticipate eventual disclosure.

The Request Lifecycle

A public-records request follows a recognizable arc, and understanding it is essential to both requesters and the agencies that serve them. A request must reasonably describe the records sought so that a knowledgeable employee can locate them with a reasonable effort. Once received, the agency logs and tracks it, determines the scope, and conducts a search across the relevant systems and custodians. Responsive records are then reviewed line by line, with exempt material identified and redacted rather than discarded. The agency communicates a determination — including any withholdings and the reasons for them — and produces the releasable records, often on a rolling basis for large requests. Statutory deadlines (twenty business days under federal FOIA, subject to limited extensions) impose discipline on this timeline, though backlogs are a chronic reality. The dedicated article on the request lifecycle walks through each stage and the practical decisions that arise at every step.

Exemptions: The Limits on Disclosure

The right of access is broad but not absolute. Federal FOIA enumerates nine exemptions that allow, and in some cases require, agencies to withhold information. They protect, among other things, properly classified national-security information; internal personnel rules; matters specifically exempted by other statutes; trade secrets and confidential commercial information; certain inter- and intra-agency deliberative communications; personal privacy; law-enforcement records; bank-examination materials; and geological data about wells. Two principles shape how exemptions operate in practice. First, exemptions are generally permissive rather than mandatory, and a “foreseeable harm” standard increasingly requires agencies to show that disclosure would actually cause the harm an exemption is meant to prevent. Second, agencies must release any reasonably segregable non-exempt portion of a record, which is why redaction — not wholesale withholding — is the norm. The exemptions article examines each category and the recurring interpretive battles they generate.

Appeals and Enforcement

When a requester believes records were wrongly withheld, the search was inadequate, or fees were improperly assessed, the law provides a path to challenge the agency. Under federal FOIA, this typically begins with an administrative appeal to the agency itself, followed, if necessary, by a lawsuit in federal district court, where the agency bears the burden of justifying any withholding. Mediation services and oversight bodies offer non-litigation alternatives that can resolve disputes faster and more cheaply. State systems vary widely — some route appeals through an attorney general or a dedicated public-access ombudsman, others directly to court. The appeal-process article details these channels and the strategic considerations at each level.

Fees, Fee Waivers, and the Cost of Access

Access is a right, but it is not always free. Agencies may charge for search time, review of records for exemptions, and duplication, with the applicable categories and rates depending on the requester’s status — commercial requesters, news media, educational and noncommercial scientific institutions, and “all other” requesters are treated differently. Fee waivers or reductions are available when disclosure is in the public interest because it is likely to contribute significantly to public understanding of government operations and is not primarily in the requester’s commercial interest. Fee disputes are common and can themselves become grounds for appeal. The fees-and-waivers article explains how charges are calculated and how to make an effective waiver argument.

State Public-Records Laws

FOIA governs only federal agencies. State and local government records — which constitute the vast majority of the records the public actually seeks — are governed by each state’s own public-records or open-records act, often paired with open-meetings (“sunshine”) laws. These statutes share FOIA’s presumption of openness but differ in deadlines, exemptions, fee structures, enforcement mechanisms, and the definition of a covered “agency” or “record.” Practitioners who operate across jurisdictions must treat each regime on its own terms rather than assuming federal rules apply. The state-laws article surveys these differences and the common patterns that unite them.

How Access Fits the Records Lifecycle and Good Practice

Disclosure obligations are only as good as the records management beneath them. If records are not reliably created, captured, classified, and retained, they cannot be found, and an inadequate search can be as damaging to an agency as an unlawful withholding. Sound practice begins upstream: clear retention schedules so records are neither destroyed prematurely nor hoarded indefinitely; consistent metadata and naming so search is fast and defensible; capture of records across email, messaging, and collaboration platforms where so much government work now happens; and disposition that is documented and authorized. National standards reflect this shift. NARA withdrew its endorsement of the DoD 5015.2 records-management application criteria in 2022 in favor of the Universal Electronic Records Management Requirements developed through the Federal Electronic Records Modernization Initiative (FERMI), signaling a move away from certifying monolithic systems and toward functional requirements that any compliant platform can meet. Recurring challenges include sprawling unstructured data, ephemeral messaging, over-broad use of exemptions, and chronic backlogs.

The trajectory of public-records law points toward more proactive and machine-readable disclosure: agencies posting frequently requested records before anyone asks, publishing structured open data, and using technology to accelerate search and redaction. As the volume and variety of government information continue to grow, the line between access and information governance will keep blurring — and the organizations that treat transparency as a design requirement, rather than an afterthought, will be the ones that meet their obligations with confidence.