The Freedom of Information Act Explained

What FOIA Does — and Doesn't — Cover

The Freedom of Information Act establishes a presumption of openness: federal executive branch agencies must disclose records when asked, unless a specific legal exemption applies. This presumption reversed the pre-1966 default, which required requesters to demonstrate a need before agencies would share documents.

Despite its broad reach, FOIA has clear boundaries. It covers departments and agencies within the executive branch — the Department of Justice, the Environmental Protection Agency, the Department of Veterans Affairs, and hundreds of others. It does not apply to:

• Congress and its committees
• Federal courts, including the Supreme Court
• The President's immediate White House staff offices
• State and local government agencies
• Private companies or individuals

For state and local records, you'll need to consult your state's open records law. See your rights under U.S. public records law for a broader view of how transparency rights work across all levels of government.

The Nine FOIA Exemptions

FOIA's openness presumption is powerful, but not absolute. Congress built in nine exemptions that allow agencies to withhold records in specific circumstances:

1. National security and foreign policy — classified information
2. Internal personnel rules — agency housekeeping matters
3. Information protected by other statutes — records shielded by laws such as tax return data under the Internal Revenue Code
4. Trade secrets and confidential business information
5. Inter-agency or intra-agency deliberative communications — protecting the government's internal decision-making process
6. Personal privacy — information whose disclosure would constitute an unwarranted invasion of individual privacy
7. Law enforcement records — information that could compromise investigations or endanger sources
8. Financial institution supervision records
9. Geological and geophysical data

Critically, many exemptions are discretionary, not mandatory. An agency may withhold information under an exemption, but it is not always required to do so. The Obama-era and subsequent administrations have issued guidance favoring disclosure when in doubt.

Understanding where FOIA exemptions end and other federal privacy protections begin is important. Laws such as HIPAA, FERPA, and the Driver's Privacy Protection Act create additional shields that overlap with FOIA. See federal privacy laws that shape what you can access for a plain-language breakdown.

How to Submit a FOIA Request

Filing a FOIA request is simpler than many people expect. The basic steps are:

1. Identify the right agency. FOIA requests go to specific agencies, not a central federal office. If you're looking for immigration records, that's USCIS; for military service records, it's the National Archives.
2. Write a clear request letter. Describe the records you want as specifically as possible — dates, subjects, document types, and any names involved. Vague requests produce vague results and slower processing.
3. Submit through the agency's FOIA portal. Most agencies accept requests online via FOIA.gov or their own portals. Some still accept requests by mail.
4. Track and follow up. Agencies must acknowledge receipt within 20 business days. If you hear nothing, follow up in writing and reference your submission date.

If your request is denied in whole or in part, the agency must tell you which exemption it relied upon. You then have the right to file an administrative appeal, and ultimately to seek judicial review in federal court.

FOIA and the Privacy Act: Two Laws, One System

FOIA and the Privacy Act of 1974 operate in parallel and sometimes in tension. While FOIA is designed to open government records, the Privacy Act restricts what agencies can disclose about individuals without consent. When the two laws overlap — for example, when a request targets records about a private citizen — agencies must balance disclosure against privacy protection.

In practice, this means a third party cannot use FOIA to obtain detailed personal records about you that would be protected under the Privacy Act. Conversely, you can use both laws simultaneously to request your own records, which typically gives you broader access than FOIA alone. For a deeper look at this interplay, see the role of the Privacy Act in limiting public records.

It is also worth noting that FOIA is distinct from the Fair Credit Reporting Act, which governs how consumer reporting agencies collect and share personal data for employment and credit purposes — a separate legal framework with different rules and rights.

This article is for general informational purposes only and does not constitute legal advice. For questions about specific FOIA requests or legal rights, consult a qualified attorney.