The Nine FOIA Exemptions Explained (and How Agencies Overuse Them)

The Freedom of Information Act creates a strong presumption that federal records are public. Agencies can only withhold records that fall within one of nine narrow exemptions listed at 5 U.S.C. § 552(b). In practice, agencies invoke those exemptions constantly — often beyond their actual scope. Knowing what each exemption covers is the key to challenging bad withholdings.

Exemption 1: National Security

Covers records "specifically authorized under criteria established by an Executive Order to be kept secret in the interest of national defense or foreign policy," and properly classified. Agencies must show both proper classification procedure and that the classification was substantively warranted. Overuse: retroactive classification, or classification of embarrassing but non-sensitive information.

Exemption 2: Internal Personnel Rules and Practices

Once a broad tool, now narrow after Milner v. Department of the Navy (2011). It covers only rules and practices related to employee relations, not general operational manuals. Overuse: claiming Exemption 2 for law enforcement manuals — Milner rejected exactly that.

Exemption 3: Records Exempted by Other Statutes

Applies when another federal statute prohibits disclosure. Common examples: grand jury materials, tax return information (26 U.S.C. § 6103), certain CIA and intelligence-community records. Overuse: citing statutes that permit but don't require withholding, or citing statutes that don't clearly apply to the specific record.

Exemption 4: Confidential Commercial Information

Covers trade secrets and commercial or financial information that is confidential. After Food Marketing Institute v. Argus Leader Media (2019), information qualifies as "confidential" if the submitter customarily and actually treats it as private and provided it to the government under an assurance of privacy. Overuse: claiming Exemption 4 for information the submitter routinely discloses publicly (e.g. in SEC filings).

Exemption 5: Deliberative Process, Attorney-Client, and Work Product

Protects "inter-agency or intra-agency" pre-decisional deliberations, attorney-client communications, and attorney work product. This is the most-abused exemption. Overuse: withholding final decisions, factual material, or post-decisional analyses; claiming deliberative process for records that are neither pre-decisional nor deliberative. The 2016 FOIA Improvement Act added a 25-year cutoff on deliberative-process claims.

Exemption 6: Personal Privacy

Covers personnel, medical, and similar files whose disclosure would constitute a "clearly unwarranted invasion of personal privacy." Requires a balancing test — the privacy interest against the public interest in disclosure. Overuse: shielding the work conduct of public officials, or applying Exemption 6 to purely business records.

Exemption 7: Law Enforcement Records

Has six sub-parts, each covering a different type of harm from disclosure: interference with enforcement proceedings (7(A)), fair-trial rights (7(B)), unwarranted privacy invasions (7(C)), confidential sources (7(D)), law enforcement techniques (7(E)), and endangerment of life or safety (7(F)). Overuse: 7(A) claims for closed investigations, 7(E) claims for widely-known techniques, and 7(C) claims for public officials' work conduct.

Exemption 8: Financial Institution Supervision

Protects records related to the supervision of banks and other financial institutions. Rarely litigated. Narrow overuse concerns.

Exemption 9: Geological Data

Protects geological and geophysical information about wells. The narrowest exemption; rarely invoked.

The Foreseeable Harm Standard

The FOIA Improvement Act of 2016 requires agencies to release records unless they can articulate a specific "foreseeable harm" from disclosure — reciting the exemption isn't enough. Many agency denials still fail this standard, and it's often the first place to attack a withholding.

Segregability

Agencies must release "any reasonably segregable portion" of a record after redacting exempt material. Full withholdings ("the entire document is exempt") are rarely justified. Insist on segregation and require a detailed Vaughn index in litigation.

Challenging Improper Exemptions

Read the agency's denial letter carefully — which exemption, applied to which records?
File an administrative appeal within the deadline (usually 90 days)
Cite the foreseeable-harm standard and any segregability failures
Escalate to federal court when the appeal is denied or ignored
Seek attorney fees if you substantially prevail

Talk to a FOIA Attorney

Agency exemption claims often unravel under scrutiny. Learn about our FOIA practice or contact us for a free consultation.

FAQ

What are the nine FOIA exemptions?

Classified national security, internal agency rules, other statutes' prohibitions, trade secrets, inter-agency deliberations, personal privacy, law enforcement records, financial regulatory records, and geological information about wells.

Can I challenge an agency's use of an exemption?

Yes. File an administrative appeal first, then sue in federal court if necessary. Courts review exemption claims de novo and the agency bears the burden of justifying withholding.

What is a Vaughn index?

A detailed log an agency must produce in FOIA litigation identifying each withheld document and the specific exemption invoked. It's often the turning point in FOIA cases.