The statement that best describes FOIA's primary purpose is this: it gives any person a legally enforceable right to obtain federal agency records, and it forces the government to justify withholding rather than forcing the requester to justify access. That disclosure-default design is the Act's core. Everything else β€” the nine exemptions, the response clocks, the fees, the appeals β€” exists to manage the consequences of that default, not to replace it. Congress wrote the purpose into the statute itself at 5 U.S.C. Β§ 552(a)(3)(A), which requires an agency to make records promptly available to "any person" on request that reasonably describes them.

What the "Any Person" Standard Actually Removes

The phrase "any person" is doing more work than most summaries admit. FOIA contains no citizenship requirement, no residency requirement, and no showing of need. A journalist in Manila, a competitor in Ohio, and a curious retiree in Leeds stand on identical legal footing, and an agency cannot ask why you want the record as a condition of release. That is the sharpest contrast with the Privacy Act of 1974, which governs only records about an individual retrieved by that individual's identifier and carries correction rights FOIA never grants.

The requester's own identity becomes relevant at exactly one point: fees and expedited processing. News media requesters and educational institutions pay only duplication costs under the fee categories in 5 U.S.C. Β§ 552(a)(4)(A), and a demonstrated "urgency to inform the public" can support expedition. Otherwise, who you are is legally invisible to the analysis.

The practical consequence is that FOIA is a public-access statute, not a personal-records statute. If you want your own immigration file, FOIA can reach it, but the Privacy Act usually gives you a cleaner path with amendment rights attached. If you want your neighbor's file, neither statute will help you, because Exemption 6 covers personal privacy and Exemption 7(C) covers law-enforcement privacy. The distinction matters when people file FOIA requests expecting consumer-style service.

"Reasonably describes" is the other quiet gatekeeper. Agencies must release records they can locate with reasonable effort, but they need not answer questions, create documents, or run database queries that do not already exist as records. A request for "all emails about the contract" may be valid; a request for "why the contract was awarded" is not a record request at all.

Why the Burden Sits on the Agency, Not the Requester

The disclosure default is enforced through burden allocation, and that is where FOIA's purpose becomes operational rather than rhetorical. Under 5 U.S.C. Β§ 552(a)(4)(B), a court reviews withholding de novo, and the agency bears the burden of proving an exemption applies. The requester never has to prove a right to the record. This inversion is the single most important structural fact about the statute, and it is what separates FOIA from discretionary transparency policies that agencies can withdraw when inconvenient.

Exemptions are permissive, not mandatory. The Supreme Court said so in Department of the Air Force v. Rose (1976), and agencies routinely release material that could lawfully be withheld. Discretionary release is the norm the statute anticipates, which is why the 2009 Attorney General memo from Eric Holder instructed agencies to defend withholdings only when they had a foreseeable harm the disclosure would cause. That memo, and the 2022 Garland memo that succeeded it, are policy guidance, not statute β€” a later administration can loosen them without Congress acting.

The nine exemptions themselves are narrower than their labels suggest. Exemption 1 covers properly classified national security material; Exemption 2, as narrowed by the Supreme Court in Milner v. Department of the Navy (2011), covers only records relating to personnel rules and practices. Exemption 5 protects deliberative process and attorney work product; Exemption 7 protects law-enforcement records only to the extent of six enumerated harms. A "FOIA exemption" is a category an agency must invoke record by record, with justification.

Here is the failure case most articles skip. Exemption 4, covering trade secrets and confidential commercial information, was reshaped by Food Marketing Institute v. Argus Leader Media (2019), which dropped the old "substantial competitive harm" test in favor of whether information was customarily kept private and provided under an assurance of confidentiality. Agencies that still apply the pre-2019 standard in their guidance are working from a superseded framework, and requesters who quote the old test in appeals can be told, correctly, that it no longer governs.

Nine Exemptions and What They Really Shield

The table below is the practical map. It covers what each exemption protects and the failure mode that most often sinks a request or appeal.

Exemption What it shields Common failure mode
1 Properly classified national defense or foreign policy material Agency invokes classification without an original classification authority behind it
2 Internal personnel rules and practices Agencies still cite "high 2" after Milner narrowed it
3 Records withheld by another statute (e.g., tax returns under 26 U.S.C. Β§ 6103) Agency names a statute that does not actually prohibit disclosure
4 Trade secrets and confidential commercial information Post-Argus Leader, agencies and requesters apply the wrong test
5 Deliberative process, attorney work product, attorney-client privilege Agency claims deliberative process for purely factual material, which is not protected
6 Personal privacy in personnel and similar files Agency redacts names of senior officials whose roles are public
7 Six enumerated law-enforcement harms Blanket "law enforcement sensitive" labeling without a specific harm
8 Records of financial institution supervision Rarely litigated; narrow by design
9 Geological and geophysical data on wells Essentially confined to oil, gas, and mineral extraction

Notice what is absent. There is no general "embarrassment" exemption, no "ongoing litigation" exemption, and no "internal review" exemption. Agencies sometimes behave as if there were, and Exemption 5 is the usual vehicle for that overreach. Factual material assembled for a decision stays disclosable even when the surrounding analysis is protected.

The 20-Working-Day Clock and Where It Breaks

FOIA's statutory response clock is 20 working days from the date the agency's FOIA office receives a perfected request, and an additional 10 working days for administrative appeals under Β§ 552(a)(6)(A). Those numbers look crisp in summaries and behave very differently in practice, because the clock starts only when the request reaches the right component and reasonably describes the records. A request misrouted through an agency's general correspondence system can sit for weeks before the clock starts at all.

"Unusual circumstances" allow one 10-working-day extension, but only for specific reasons: searching records from field offices or facilities separate from the office processing the request, examining a voluminous quantity of records, or consulting with another agency. The extension must be notified in writing with the reason stated. An agency that extends without one of those three grounds is out of compliance, and a requester who documents the date can use that in an appeal.

The real pressure point is the backlog. When agencies cannot meet the clock, they place requests in a multi-track queue and invite the requester to narrow scope or agree to an alternative timeline. Under 5 U.S.C. Β§ 552(a)(6)(C), a requester who has not received a determination after 20 working days may file suit without exhausting administrative remedies β€” a right that surprises people who assume they must appeal first. Courts can then order production and, in egregious cases, award attorney fees.

Expedited processing is the lever most requesters never pull. It requires a showing of imminent threat to life or physical safety, urgency to inform the public about actual or alleged government activity, or a due-process need for a person facing removal or a similar proceeding. The agency must decide the expedition request within 10 calendar days, and a denial is appealable. In a well-documented request, expedition is often worth more than a narrowed scope.

Public Interest, Presumption of Openness, and the Policy Layer

The statutory purpose is fixed, but the operational posture swings between administrations. Attorney General memoranda set how the Department of Justice defends agencies in FOIA litigation. The 2009 Holder memo adopted a foreseeable-harm standard. The 2017 Sessions memo withdrew it. The 2022 Garland memo restored a presumption of openness. None of these changed the text of Β§ 552, and none binds an agency to release a record a court would allow it to withhold.

That gap is the honest answer to a common question: is FOIA a transparency mandate or a litigation defense manual? It is both, and the tension is deliberate. Congress wrote access rights with teeth β€” de novo review, fee shifting, a 20-day clock β€” while leaving the exemptions permissive. The interaction means an agency that wants to withhold can usually find an exemption argument; the question is whether it can defend it. Requesters win by making defense expensive and by documenting the record.

The public-interest waiver also depends on the policy layer. Agencies may waive fees when disclosure serves the public interest because it is likely to contribute significantly to public understanding and is not primarily in the commercial interest of the requester. That two-part test comes from the statute's fee provisions, and the analysis is fact-specific. A requester who frames the public interest in concrete terms β€” an identifiable policy question, a documented gap in public knowledge β€” fares better than one who simply asserts civic value.

Here is the original computation that rarely appears in explainer articles. Take a mid-sized request with 20,000 responsive pages. At the 1995 median commercial search-and-review rates agencies may still use β€” $10.50 per hour for searching and $40.00 per hour for review, adjusted periodically β€” even partial commercial-use billing can quickly exceed the $250 threshold that triggers a deposit demand. A requester who obtains a public-interest fee waiver faces only $0.15 per page for duplication: roughly $3,000 for 20,000 pages, versus a search-and-review bill that can run into the tens of thousands. Fee category, not the merits, often determines whether a request survives.

What FOIA Was Never Designed to Do

Four boundaries get lost in the enthusiasm for the statute. First, FOIA applies to federal executive-branch agencies; it does not reach Congress, the federal courts, or the president's immediate personal staff in the White House Office. State equivalents β€” California's Public Records Act, New York's FOIL, Texas's Public Information Act β€” are separate statutes with different clocks, exemptions, and enforcement. A federal FOIA request to a state agency is simply misaddressed.

Second, FOIA does not require agencies to create records, translate them, or answer questions. If the record does not exist as a record, the correct answer is no responsive documents, and that answer is lawful. Requesters who phrase demands as interrogatories learn this the hard way.

Third, FOIA does not guarantee a deadline in practice, and it does not produce the fastest route to a document in every case. The Government Publishing Office, agency electronic reading rooms under Β§ 552(a)(2), and inspector general reports are often faster than a formal request. Fourth, FOIA has no damages remedy β€” no compensation for delay, only production plus possible fee shifting.

The procedural rules also trip up first-time requesters. A request must be in writing, reasonably describe the records, and comply with agency-specific processing rules; a request sent to the wrong component may not be perfected. Appeal deadlines are typically 90 calendar days from the denial letter, and agencies can reject an appeal filed late even if the underlying withholding was unlawful. Scope limits on what counts as a record, and what "search" means, are litigated constantly.

A Realistic Walk-Through From Request to Appeal

The sequence below follows the statute's own logic. Each step names the decision point that determines whether you keep the high ground.

1: Confirm the record exists. Check the agency's electronic FOIA library and the GPO before filing. Draft the request around identifiable records: date ranges, offices, subject lines, custodian names β€” not questions. 2: Send the request to the FOIA office, not general correspondence. Mark it as a FOIA request, state the fee category you seek, and request a public-interest waiver with specific reasons. Ask for expedited processing only if you can document one of the statutory grounds. 3: Track the 20-working-day clock from the date the FOIA office receives a perfected request. If you get no determination, you have options: narrow scope, agree to an alternative timeline, or file suit under Β§ 552(a)(6)(C) without exhausting administrative remedies. 4: Read any denial for the exemption cited and the record-by-record justification. Appeal within the agency's stated deadline β€” usually 90 days β€” and quote the statute and controlling cases such as Milner or Argus Leader where they apply. 5: If you go to court, request a Vaughn index β€” the agency's itemized justification for each withholding β€” and press for de novo review. In egregious cases, ask for attorney fees under the statute.

The failure handling is where requests die. If you filed with a component that forwards to the FOIA office, document the forwarding date to establish when the clock started. If the agency sends a fee estimate, respond in writing within the stated window; silence can be treated as withdrawal. If a denial cites Exemption 5 for factual material, point out that factual portions are not deliberative and demand segregation under Β§ 552(b). If the agency claims no responsive records, request the search description and consider appealing the adequacy of the search itself β€” that is a separate and often winning argument.

How Courts Have Redrawn Exemptions Since 2011

FOIA's text has been stable since the 2016 FOIA Improvement Act, but judicial interpretation keeps shifting the operational meaning of the exemptions. Milner v. Department of the Navy (2011) narrowed Exemption 2 to personnel rules and practices, ending decades of "high 2" withholding of internal guidance. Food Marketing Institute v. Argus Leader Media (2019) widened Exemption 4 by replacing the substantial-competitive-harm test with a confidentiality-based standard. Both rulings left agencies and requesters applying outdated checklists long after the case law moved.

The 2016 amendments added the foreseeable-harm standard for Exemptions 5 and 7 and codified a presumption of openness β€” the first time that principle appeared in the statute rather than only in DOJ guidance. It also created the Office of Government Information Services as an ombudsman, extended the clock's protections, and required agencies to post frequently requested records. Investment in program infrastructure followed: agencies now publish annual FOIA reports, and OGIS mediates disputes short of litigation.

The lesson for requesters is that a denial letter's case citation matters. An agency citing "competitive harm" under Exemption 4 is applying a test the Supreme Court discarded in 2019. An agency citing "high 2" is applying a test the Court discarded in 2011. Those citations are the opening moves of an appeal, and they cost a requester nothing to check.

The 2016 Act also fixed a small but real gap: the older "reasonably described" language now includes a requirement that agencies assist requesters in narrowing scope, which does not create records but does create a process. Requesters who invoke that assistance in writing get an audit trail.

FAQ

Who can file a FOIA request?

Anyone, anywhere β€” FOIA imposes no citizenship, residency, or need requirement. A requester in another country has the same legal right to federal agency records as a U.S. citizen, though practical processing may differ. The requester's identity matters only for fee categories and expedited processing. Privacy Act access, by contrast, is limited to the individual the records are about.

Does FOIA apply to Congress or the courts?

No. FOIA covers executive-branch agencies, and expressly excludes Congress, the federal courts, and the president's immediate personal staff. Requests to those bodies go nowhere under FOIA. State open-records laws are separate statutes with their own scope, and a federal FOIA request cannot compel a state agency to produce anything.

What happens if the agency misses the 20-working-day deadline?

You may file suit under 5 U.S.C. Β§ 552(a)(6)(C) without first exhausting administrative remedies. Many requesters instead agree to a narrowed scope or an alternative timeline, which is often faster in practice. Document the date the FOIA office received a perfected request, because that date starts the clock and supports a constructive-denial claim.

Is the "deliberative process" exemption a blanket shield?

No. Exemption 5 protects pre-decisional deliberative material, but purely factual material assembled for a decision remains disclosable, and the agency must segregate it. The 2016 amendments also require a foreseeable harm from disclosure before Exemption 5 can be invoked. A denial that cites Exemption 5 for facts is a strong appeal candidate.

How much does a FOIA request cost?

It depends on your fee category. News media and educational requesters typically pay duplication only β€” $0.15 per page at many agencies β€” while commercial requesters can face search and review charges that run into the thousands for large requests. A public-interest fee waiver can eliminate most costs. Ask for a waiver in the original request with specific public-interest reasons.

Can I get my own records through FOIA?

Yes, but the Privacy Act usually gives you a better route with correction rights. FOIA reaches records about you held by federal agencies, subject to the same exemptions, and it does not provide a mechanism to amend them. If your goal is to correct an error, the Privacy Act's amendment process is the right instrument.

What is the difference between FOIA and a subpoena?

A subpoena is a compulsory process in litigation; FOIA is a statutory access right available to anyone without a case. FOIA cannot compel testimony or the creation of records, and it has no damages remedy for delay. Litigants often use FOIA to build a record before filing, then use subpoenas to reach material FOIA exemptions would protect.

Does FOIA require agencies to answer questions?

No. FOIA requires production of existing records that reasonably describe what you seek; it does not require agencies to answer interrogatories, explain decisions, or create new documents. A request phrased as "why did the agency choose Vendor X" is not a record request. Rephrase it around identifiable documents, dates, and custodians.

This article is general educational information about a federal statute, not legal advice. FOIA outcomes depend on the specific agency, records, and facts, and exemptions and procedural deadlines vary. Consult a qualified attorney licensed in the relevant jurisdiction before filing litigation or relying on a particular exemption analysis. If you face an immediate safety or emergency situation, contact local emergency services rather than pursuing a records request.