What a Public Records Audit Trail Should Capture

Every document considered, where it came from, whether it was released, redacted, withheld, or excluded, the exemption cited, who approved it, and when. The test is whether someone who was not involved could reconstruct the decision from the record alone, a year after the file closed.

Every document considered, where it came from, whether itwas released, redacted, withheld, or excluded, the exemption cited, whoapproved it, and when. The test is whether someone who was not involved couldreconstruct the decision from the record alone, a year after the file closed.

That test is worth applying literally, because the peoplewho eventually read the trail are almost never the people who made thedecisions. They are counsel preparing a response to an appeal, an oversightbody running a review, or a successor who inherited the file.

Considered, not just produced

The most common gap is that agencies log what they releasedand not what they looked at.

A list of released documents answers the question "whatdid we give them." It does not answer "what did you search, what didyou find, and what did you decide about each thing you found," which isthe question that actually gets asked. A document that was reviewed and judgednon-responsive is part of the story. So is a document that was excluded becausean existing confidentiality classification applied.

Excluded material is the category most likely to be missingentirely, because exclusion happens before review and often feels likehousekeeping rather than a decision. It is a decision. If it is not recorded asone, it is indistinguishable later from a document nobody found.

The seven fields

The document, identified well enough to retrieve itagain.

Its source. Which system, which custodian, whichsearch. This is what links the trail back to the adequacy of the search.

Its disposition. Released, redacted, withheld, orexcluded. Four states, not two.

The basis. The exemption cited, or the reason forexclusion, or a note that it was non-responsive.

The reasoning. One or two lines on why this materialmeets that test. The citation alone is not reasoning.

Who approved it, by name.

When, at each step rather than only at closure.

Seven fields sounds like a lot until you notice that six ofthem are captured as a byproduct of doing the work properly, and only the fifthrequires anyone to write a sentence.

Produced during the work, not assembled afterward

This is the part that decides whether an audit trail isuseful or theatrical.

A trail assembled after closure is a reconstruction. It isbuilt from memory, from email, and from whatever the caseworker happened tonote, by someone who may not have been involved. It takes days, it isincomplete in ways nobody can identify, and it is produced under exactly thetime pressure of an appeal deadline.

A trail produced during the work costs almost nothing,because the information exists at the moment each decision is made and issimply captured rather than recalled. The difference in effort is large. Thedifference in reliability is larger.

The question is notwhether your agency keeps an audit trail. It is whether the trail was writtenwhile the decisions were being made or afterward, from memory, by someonedefending them.

Where approvals usually escape

Sign-off is the field most often missing, and the reason isstructural rather than careless.

Counsel or a supervising custodian reviews a proposedrelease and approves it by email, because email is where that conversationnaturally happens. The approval is real and it is documented, but it lives in amailbox rather than in the case file. A year later, establishing who approvedwhat means searching somebody's sent items, and if that person has left theagency it may mean an IT request.

Keeping approval inside the case record costs nothing at themoment it happens and saves a great deal at the moment it matters.

What the trail is for

Three things, in increasing order of stakes.

Answering the requester. Most questions after arelease are simple and are resolved by looking something up.

Responding to an appeal. Here the trail becomes thesubstance of the response: what was searched, what was found, what waswithheld, and why.

Litigation. At this point the agency may need toproduce an itemized account correlating each withheld document with theexemption claimed and the justification for it. Govflo is built to produce a Vaughn indexand a reproducible search trail that can be replayed for in camera review, drawingon the record captured during the work rather than assembled at the point ofneed.

Govflo records every document considered with its source andits disposition, keeps approval inside the case, and records material set asideunder an existing confidentiality label rather than omitting it silently. Eachsearch is captured with its date, terms, sources queried, the number returned,the number responsive, and the withheld and redacted sets with theirexemptions, which is the same set of facts a statutory response letter has tostate, so the letter draws on the trail instead of being assembled separately.One unredacted master is kept with every redacted version linked to it, sowhich version went out with which request is answerable. Viewing an unredacted originalcan be placed behind a two-person unlock, with each access written to the log.

It does not determine whether a withholding was correct. Itpreserves the account of what was decided so the correctness can be argued fromevidence rather than asserted from memory.

Retention

The trail needs to outlive the request by a wide margin.

Appeals arrive months later. Litigation arrives years later.A closed request is not a finished matter, and a trail retained on the sameschedule as routine correspondence will frequently be gone before it is needed.Confirm the retention period against your own schedule, and confirm it coversthe trail and not only the released documents.

‍

Frequently asked questions

Is an audit trail legally required?
How much detail is too much?
Should the trail be releasable?

See it running on your statute

Govflo runs public records requests and open meetings from intake through to release, configured to the law that governs each request. Tell us about your agency and we will set up a working session.

Talk to us
Where do your records actually live?

The inventory of every system holding records, with a custodian named for each, is the highest-value hour a records office can spend.

Talk to us