Withholding and Redaction: Deciding What to Release and Proving It

An agency can withhold only what a specific exemptioncovers, has to release the rest of the document, and needs to be able to showits reasoning afterward. Most disputes turn on that third part. The exemptionwas arguable, but nobody recorded why it was applied, so it cannot be defended.

That is the shape of the whole subject, and it is worthstating in that order because agencies tend to spend their attention in thereverse order. Enormous care goes into the question of whether something isexempt. Considerably less goes into applying the answer consistently, andalmost none into preserving the reasoning, which is the thing that gets askedfor eight months later when an appeal lands.

The reason the third part carries the disputes is timing.The exemption question is answered while the material is in front of you, bysomeone who has read it. The question that arrives later is answered by someonewho has not, working from whatever was written down, often after the originalreviewer has moved on. Those are very different conditions, and only one ofthem can be prepared for in advance.

This guide covers all three: what the law permits you towithhold, how to apply it so the same question gets the same answer twice, andhow to keep an account that survives the closure of the file. It describesframeworks and the ways they differ between jurisdictions. It does not tell youwhether a particular exemption applies to a particular record, because that isa legal determination that belongs to your agency and its counsel.

Two notes on scope. This is written for the agency side, forthe custodians, public information officers, and counsel who make thesedeterminations rather than for requesters challenging them. And it treatsfederal FOIA, state public records statutes, and local ordinances as distinctregimes throughout, because the differences between them are exactly wheregeneric guidance causes harm.

Every public records statute in the country starts from thesame premise: the records are public, and withholding is the exception.

That is not a rhetorical flourish. It has practicalconsequences. Exemptions are generally construed narrowly. The burden ofjustifying a withholding sits with the agency rather than with the requester,which means the agency has to be able to articulate its reasoning rather thansimply assert a conclusion. And in most jurisdictions the agency cannotwithhold a whole document because part of it is exempt.

The direction you reason from changes the outcome more thanmost people expect. Starting from disclosure and working toward an exemptionproduces different results than starting from caution and working towardrelease. The first asks what specifically must be protected. The second askswhat could possibly go wrong, and the honest answer to that question is alwayssomething, which is how documents get withheld in full when a redacted page wasthe correct response.

It also affects what you can defend. An agency that withheldnarrowly and can say exactly why is arguing about one paragraph. An agency thatwithheld a document in full is arguing about all of it, including the partsnobody had any interest in protecting, and the weakest part of that claim tendsto set the tone for the rest.

Reasoning from caution is understandable. Nobody has everbeen disciplined for withholding too much. But over-withholding is the mostcommon finding against agencies on appeal, and it is expensive in a quiet way:it generates appeals, it generates litigation, and it costs the agency credibilityon the occasions when it genuinely does need to withhold something.

An agency operating under more than one transparency regimeis applying more than one framework, and treating them as interchangeable is areliable source of error.

Federal FOIA contains nine exemptions at 5 U.S.C. §552(b), covering national security, internal agency personnel rules,information other statutes protect, confidential commercial information,privileged inter-agency communications, personal privacy, law enforcementrecords, financial institution supervision, and geological data. The list isclosed and well documented. See thenine FOIA exemptions, explained for the detail on each.

State public records laws rarely copy that structure.Most scatter exemptions across the entire state code rather than collectingthem in one provision, so the count runs into the hundreds in some states, andthe categories do not map cleanly onto the federal nine. An exemption thatexists federally may have no state analogue, and states routinely protectcategories federal law does not address at all. How state exemptionsdiffer from federal FOIA covers the structural differences.

Local ordinances add a third layer in somejurisdictions, usually procedural rather than substantive, but occasionallywith their own protected categories.

There is a second complication in states that have layereddecades of amendments onto an older statute. Exemptions added at differenttimes may use different tests, protect overlapping categories, or sit in codechapters that have nothing to do with public records, such as licensing,health, or education provisions. Finding the applicable exemption is genuinelya research task in those jurisdictions, and the answer is not always in thepublic records act itself.

This is also why a generic policy borrowed from anotheragency travels badly. The categories will look familiar and the testsunderneath them will not be the same.

The practical implication is that the same document cancarry different answers depending on which law the request was made under. Anagency that receives requests under both federal and state regimes needs toknow which one governs each request before the exemption analysis starts, notafter.

Most agencies spend most of their time in a small number ofcategories, whatever the statute's full list contains.

One structural point applies across all of them. Anexemption describes a category of material, not a category of document. Asingle memo can contain a paragraph of protected personal information, aparagraph of privileged legal advice, and four paragraphs of ordinary factualbackground that nothing protects. Treating the memo as belonging to oneexemption family is how documents get withheld in full when three redactionswere the correct answer.

Personal privacy. The largest single category byvolume. The analysis generally weighs an individual's privacy interest againstthe public interest in understanding what the government is doing, and thesecond half of that test is narrower than it sounds: it concerns what therecord reveals about agency conduct, not general public curiosity about aperson. A public employee's salary is usually disclosable. Their medical fileis not. The large middle ground is where the work is. Personal privacyversus public interest covers the balancing.

The families below are described as they commonly appear.The names, the tests, and the boundaries between them differ by jurisdiction,sometimes substantially, so treat this as a map of the terrain rather than asthe provisions that govern you.

Deliberative material. Protects pre-decisional,deliberative communications so that agencies can argue internally beforedeciding. Both prongs have to hold, and purely factual material inside anotherwise deliberative document is frequently still releasable. It is the mostover-claimed exemption in practice, partly because "internal" feelslike it should be sufficient and it is not. See deliberativeprocess.

Law enforcement records. Federally this is Exemption7, which has several distinct subparts covering interference with proceedings,fair trial rights, personal privacy, confidential sources, techniques, andphysical safety. Each subpart has its own test. The one most often invoked, andmost often invoked too broadly, concerns interference with an ongoingenforcement proceeding, which generally requires an actual pending orreasonably anticipated proceeding rather than an open case number. See the activeinvestigation exemption.

Attorney-client privilege and work product. Federallythese sit inside Exemption 5 alongside deliberative process. The recurringerror is procedural rather than legal: copying counsel on an email does notmake the email privileged. The communication has to be for the purpose of legaladvice. Attorney-clientprivilege in public records covers the distinction.

Security and infrastructure. Building plans, networkdetail, emergency response procedures, and similar material, protected in manyjurisdictions on the basis that disclosure would create vulnerability. Thecategory is narrower than agencies often assume, and the analysis usually turnson whether the specific detail would actually assist someone seeking to causeharm rather than on the document's general subject.

Statutory exemptions. Material another statuteprotects, such as certain health, education, or tax records. These are usuallythe cleanest to apply because the protecting statute states the category, andthey are worth identifying early because they often dispose of a requestquickly.

Personnel matters. Disciplinary records, evaluations, andcomplaints against employees, which is one of the most jurisdictionallyvariable categories in the entire field. Some states treat sustained findingsagainst public employees as presumptively disclosable; others protect theentire file. The variation is wide enough that an agency operating in more thanone state cannot carry a single position across them.

Confidential commercial information. Trade secretsand commercially sensitive material submitted by third parties. Manyjurisdictions require notifying the submitter before release, which adds a stepand a timeline that needs planning for.

A last point on the families. Which of them an agencyreaches for most is a fact about the agency rather than about the law. A policedepartment lives in the law enforcement and privacy provisions. A health agencylives in the statutory ones. A finance office lives in confidential commercialinformation. Knowing which two or three provisions carry the bulk of your withholdingstells you where to concentrate training, where to write standing positions, andwhich part of the statute is worth reading closely rather than skimming when itis amended.

Identifying a plausible exemption is the beginning of theanalysis, not the end of it. Two further steps are frequently skipped, and bothof them are where appeals are lost.

Segregability. In most jurisdictions the agency mustrelease any reasonably segregable portion of a document, even where part of itis properly withheld. In practice this means a redacted page rather than awithheld document, far more often than instinct suggests. Withholding adocument in full generally requires being able to say that nothing in it can beseparated out, and that is a stronger claim than it appears.

Harm. A number of regimes require more than categorymembership. Federal FOIA, since the 2016 amendments, generally requires thatthe agency reasonably foresee harm from disclosure, or that disclosure beprohibited by law, rather than allowing withholding merely because a recordfalls within an exemption's description. Several states have comparablerequirements. Where such a standard applies, "this is deliberative"is an incomplete answer; the question is what specifically would be harmed.

Both steps also have to be documented to be worth anything.A segregability analysis that happened in someone's head and produced awithheld document looks identical, on the file, to no analysis at all. The sameis true of a harm assessment. Where these standards apply, the reviewing bodyis generally asking what the agency considered, and an assertion that it wasconsidered is weaker than a note showing what was weighed.

There is a third step that is not legally required but ispractically decisive: writing down the reasoning at the moment you reach it. Acitation records what was applied. It does not record why this material metthat test, and the difference between those two things is the differencebetween a defensible file and an argument you have to reconstruct.

Three different actions, frequently conflated, withdifferent justifications and different consequences.

Redaction releases a document with specific materialobscured. It is the default response to a document containing some exemptcontent, and it is what segregability generally requires.

Withholding refuses the document entirely. It has tobe justified document by document, and it requires the position that nothing init is reasonably segregable.

Exclusion removes material from consideration beforereview, usually because it is non-responsive or because an existingconfidentiality classification applies. It is not an exemption claim at all,which is precisely why it needs recording. Note that federal FOIA uses"exclusion" in a narrow technical sense at § 552(c) for a small setof law enforcement circumstances; the operational sense used here is broaderand the two should not be confused in correspondence.

The three also carry different burdens if challenged. Aredaction puts the specific obscured material in issue. A withholding puts theentire document in issue, along with the claim that nothing in it wasseparable. An exclusion is not defended as an exemption at all but as a scopingdecision, which means the question becomes whether the scope was reasonablerather than whether the exemption fits. Choosing the wrong one of the threedoes not merely mislabel the action; it changes the argument you will have tomake.

Recording which of the three you did, and why, is what makesany of them defensible. Exclusion is the one most likely to go unrecorded,because it happens before the review proper and feels like scoping rather thandeciding. A document excluded and recorded as excluded is a decision. Adocument excluded and not recorded is indistinguishable, later, from a documentnobody found. Redactionversus withholding versus exclusion covers the distinctions in detail.

The legal analysis produces a decision. Applying itcorrectly is a separate skill with its own failure modes.

Cite the specific exemption for each redaction rather thanthe statute generally. A page marked with a single global citation tells areviewer nothing about which redaction rests on which basis, and if one of themis challenged the others are dragged into the argument with it.

Release every segregable portion rather than withholding thesurrounding material for convenience. Flatten the file so the obscured contentis actually removed rather than covered, which is a tooling question more thana technique question. And record the reasoning while making it rather thanafterward.

Consistency of labeling matters as much as consistency ofjudgment. If one caseworker marks redactions with the statutory subsection andanother writes a short phrase, a reviewer reading fifty pages cannot tellwhether two similar redactions rest on the same basis or on different ones.Agreeing a single citation format, once, removes an entire class of ambiguityfrom every future release.

It is also worth deciding in advance how to handle materialredacted on more than one basis. A passage covering both a third party'spersonal information and a privileged legal discussion has two independentgrounds, and recording only the first leaves the second undefended if the firstis rejected.

The technical failures deserve their own attention, becausethey are invisible in exactly the place people check. A black box overunflattened text, metadata carrying an author name or a file path, trackedchanges left in a document, hidden rows in a spreadsheet: in each case thereleased file looks correct when opened and discloses anyway. Failed redaction sets outthe pre-release checks. How to redact a documentdefensibly covers the method.

Video is the same analysis against a much harder productionproblem, and it is where backlogs concentrate in agencies that receivebody-worn camera requests.

A redaction on a page is decided once. A redaction in videohas to hold across every frame in which the subject appears, while the subjectmoves, turns, and is briefly occluded. A face correctly obscured for nineseconds and visible in the tenth has failed. Audio adds a parallel problem:names and identifying detail spoken mid-sentence, at conversational speed, overradio traffic.

The exemption analysis also has to happen before theproduction work, not alongside it. Redacting an hour of footage that isultimately withheld in full is the most expensive route to a decision anyonecan take, and it happens whenever the release question is treated as somethingto resolve once the material is ready.

Multi-camera incidents deserve a specific note. Sixrecordings of one event share most of their redaction decisions, and handlingthem as six separate jobs means making the same call six times, with sixchances to make it differently. Working them as one job is both faster andconsiderably more consistent.

Most of the time is not spent applying the obscuring. It isspent on the first pass, watching the footage to establish what is in it andwhen, which is a real-time activity before any judgment can be applied.Transcription changes that economics considerably, because it converts awatching problem into a searching problem. Video and body-worn cameraredaction covers the workflow.

Two caseworkers apply the same exemption to the samematerial and reach different conclusions. Or the same caseworker decidesdifferently in March and September. Neither call is indefensible on its own.The problem is that both exist.

Two releases of the same material redacted differently isthe strongest evidence a requester can have that a withholding was unnecessary,and it converts a legal argument about the exemption into a factual argumentabout the agency's own behavior, which is much harder to answer.

The cost shows up in two places. The obvious one is theappeal. The quieter one is time: a caseworker facing a question the agency hasalready answered twice, with no way to see either answer, does the analysisagain from the beginning. Across a year that is a substantial amount of skilledwork spent re-deciding settled questions.

The cause is structural rather than about competence. Thereasoning behind the first decision was never written down, or was writtensomewhere the second person had no reason to look. Institutional judgment abouthow this agency handles close calls is real and valuable, and it typicallylives in one experienced custodian's head, where it does not survive leave,turnover, or the twentieth document of the afternoon.

Inconsistency is a record-keeping failure before it is ajudgment failure, which is useful news, because record-keeping is the moretractable of the two things to fix. Settling the recurring categories asstanding positions removes them from the per-request queue entirely, and makingthose positions visible where the work happens rather than in a policy documentis most of the remaining work.

Govflo offers tworedaction modes, and the choice between them is itself a legal decision worthmaking deliberately. Match-based redaction acts on an exact term anddeliberately stores no reasoning, which is the conservative option: there isnothing for anyone to interrogate later beyond the fact that a term matched.The assistive mode records its reasoning and the exemption it rests on againsteach proposal, which is what makes prior decisions available to the nextreviewer, and which is also more material that exists to be examined.

In the assistive mode a new proposal is checked against how thesame kind of material was handled before, and divergence is flagged for thereviewer rather than passing quietly. That check is the part no manual processcan perform, because no person can compare a redaction against years of priordecisions while making it. Patterns an agency wants to keep can be promotedinto a standing rule, and that promotion is itself an approval step rather thansomething the system does on its own. A caseworker reviews and approves everyproposal before anything is released, and redactions lock once applied.

What Govflo does not do is decide whether an exemptionapplies. It is not a legal research tool and it does not advise on thequestion. That determination stays with the agency. What changes is that itgets made once, deliberately, and is available the next time the same questionarrives. Whythe same exemption gets applied two different ways covers the operationalside.

The account of what you decided should be a byproduct ofdoing the work, not a document assembled afterward.

A usable record captures every document considered ratherthan only those released, its source, its disposition across four states ratherthan two, the basis cited, one or two lines of reasoning, who approved it, andwhen. The test is whether a colleague who was not involved could reconstructthe decision from the record alone, a year after the file closed.

Reasoning is the field most often thinned. Under time pressurethe note shrinks to the citation, because the citation is the part that feelsofficial. It is the wrong half to keep. Anyone can look up what a subsectionsays; nobody but the original reviewer can say why this paragraph met it, andthat sentence is what the appeal actually needs.

Approvals are the field most often lost, and for astructural reason. Counsel signs off by email, because that is where theconversation naturally happens, and the approval then lives in a mailbox ratherthan in the case file. A year on, working out who approved what means goingthrough somebody's sent items, and if they have left the agency it may meanraising a ticket with IT. Keeping approval inside the case record costs nothingat the time and saves a great deal later.

Govflo records every document considered with its source andits disposition, keeps approval inside the case rather than in correspondence,and can deliver the release with a plain-language glossary explaining theredactions applied to it, which tends to reduce both the follow-upcorrespondence and the appeals. It is built to produce a Vaughn index and areproducible search trail that can be replayed for in camera review, drawing onthe record captured during the work. What a public recordsaudit trail should capture covers the fields.

Withholding analysis assumes you found the material in thefirst place, and the adequacy of the search is a separate question that appealsfrequently reach before they reach the exemptions.

The standard in most jurisdictions is whether the search wasreasonably calculated to uncover responsive records. It is a standard aboutmethod rather than outcome, which means missing a document does notautomatically make a search inadequate. It also means the agency has to be ableto describe the method: which systems, which custodians, which terms, whichdate ranges.

In practice the description is usually given as adeclaration or affidavit, and it is expected to be reasonably detailed ratherthan conclusory. A statement that the agency conducted a thorough search of itsrecords is the form of answer that tends to fail. A statement naming thesystems queried, the custodians whose accounts were included, the terms run,and the date range applied is the form that tends to succeed, because it letssomeone else assess the reasonableness rather than asking them to accept aconclusion.

The practical consequence is that the search has to berecorded as it runs. Reconstructing terms and date ranges months later producesa description that is either vague, which fails, or precise but unverifiable,which is worse.

That is a more forgiving standard than many records officersassume, and it has a sharp edge. An agency that found ten documents and candescribe its search is in a considerably stronger position than one that foundforty and cannot. Provingan adequate search covers what the description needs to contain.

Most releases are never questioned. The ones that are followa broadly similar path.

Administrative appeal usually comes first, decidedinternally or by a designated review authority. This is where the reasoningcaptured during the work does its main work, and where its absence is mostexpensive, because the response has to be written to a deadline from whateverrecord exists.

The appeal is also where the quality of the original recordbecomes visible in a way it never is during normal operation. A file assembledproperly produces a response that is largely a matter of transcription. A filethat was not produces a week of work reconstructing decisions from memory andcorrespondence, under a deadline, by people who may not have made them.

Judicial review follows if the appeal fails. Theburden generally sits with the agency to justify each withholding, and reviewof the underlying determination is often de novo rather than deferential to theagency's conclusion.

In camera review is the mechanism by which a courtexamines withheld material privately to assess the claim. An agency may also berequired to produce an itemized index correlating each withheld document withthe exemption claimed and the justification for it, a practice that takes itsname from Vaughn v. Rosen.

Timing is worth understanding before you need it.Administrative appeals typically run on short statutory deadlines, sometimesconsiderably shorter than the original response period, and the clock starts onthe determination rather than on the delivery of records. An agency that treatsan appeal as a new project rather than as a continuation of an existing filefrequently loses a third of the available time simply locating the originalreasoning.

Fees and penalties vary sharply betweenjurisdictions, and this is one of the places where federal and state practicediverge most. Several states provide for mandatory fee-shifting where arequester substantially prevails, which changes the economics of a marginalwithholding considerably. Check your own provision rather than assuming thefederal position.

‍