How FOIA Requests Work

A FOIA request is a formal written request submitted under the Freedom of Information Act (5 U.S.C. § 552) asking a federal executive branch agency to release government records that are not already publicly available.

Quick Answer: FOIA requests allow anyone — including journalists, researchers, and private citizens — to request records from federal executive branch agencies. The process involves identifying the correct agency, submitting a written request describing the records sought, waiting for a response (20 business days by statute, often longer in practice), and appealing if the request is denied or inadequate. FOIA is commonly used to obtain investigative files, agency communications, enforcement records, and internal government documents not available through searchable databases.

FOIA — the Freedom of Information Act — is one of the most powerful transparency tools in the United States. While many government records are accessible through court portals and public databases, a significant category of federal records requires a formal FOIA request to obtain. Understanding how the process works gives journalists, investigators, researchers, and citizens access to documents that would otherwise remain invisible.

⚠️ Legal Notice: The Freedom of Information Act applies only to federal executive branch agencies. Federal courts, Congress, the White House, and state and local governments operate under different rules. Certain categories of records are exempt from disclosure. This guide explains the FOIA process for educational purposes and does not constitute legal advice.

Why This Guide Is Reliable

inet-investigation.com publishes research-based guides built on primary government sources, investigative practice, and public records law. All sources cited link to official government websites or primary legal references. For jurisdiction-specific legal questions, consult a licensed attorney or the relevant government agency.

Why FOIA Exists

FOIA was enacted in 1966 based on a foundational principle of democratic governance: government records belong to the public unless a specific legal reason exists to withhold them. Federal agencies exercise public authority, spend taxpayer money, and make decisions that affect millions of people — the public has a legitimate interest in reviewing how those decisions are made.

The law requires federal executive branch agencies to disclose records upon request unless the records fall within one of nine specific statutory exemptions. The burden is on the agency to justify withholding — not on the requester to justify access.

Source: Freedom of Information Act — 5 U.S.C. § 552 — Cornell LII

The Legal Framework

Source: Freedom of Information Act — 5 U.S.C. § 552 — Cornell LII Source: FOIA Exemptions — 5 U.S.C. § 552(b) — Cornell LII

What FOIA Covers — and What It Doesn’t

What FOIA Covers

FOIA applies to records held by federal executive branch agencies — departments, regulatory agencies, and federal offices. Examples include:

• Department of Justice (DOJ)
• Department of Homeland Security (DHS)
• Environmental Protection Agency (EPA)
• Securities and Exchange Commission (SEC)
• Federal Bureau of Investigation (FBI)
• Department of Defense (DOD)
• Internal Revenue Service (IRS)
• Food and Drug Administration (FDA)

What FOIA Does NOT Cover

This is the most important limitation to understand before filing a request.

Federal courts — court records are accessed through PACER (pacer.gov), not through FOIA. The federal judiciary is an independent branch of government with its own access rules.

Congress — the legislative branch is not subject to FOIA. Congressional records have their own disclosure rules.

The White House and Executive Office of the President — the President’s immediate staff and certain White House offices are not subject to FOIA.

State and local governments — state agencies, county governments, and municipal offices operate under each state’s own open records law, not federal FOIA. What works for requesting FBI records does not work for requesting state police records.

Private companies — private organizations are not subject to FOIA. However, records submitted by private companies to government agencies (such as SEC filings or EPA permit applications) may be requestable from the agency.

→ Related guide: What Makes a Record Public?

→ Related guide: What Are Public Records?

Who Can File a FOIA Request

Anyone. FOIA requests can be submitted by any person — U.S. citizen, foreign national, corporation, nonprofit, journalist, researcher, or private individual. No reason or justification is required to file a FOIA request. The law does not require requesters to explain why they want the records.

What You Can Request

FOIA allows the public to request existing agency records — documents, emails, reports, databases, photographs, audio recordings, and other materials already in the agency’s possession.

Common FOIA requests include:

• Investigative reports and case files
• Agency emails and internal communications
• Policy memoranda and internal guidance documents
• Regulatory enforcement records and inspection reports
• Government contracts and procurement records
• Internal research studies and analyses
• Historical intelligence documents
• Records about yourself (combined with Privacy Act requests)

What agencies are NOT required to provide:

• New documents created in response to the request
• Answers to questions
• Research conducted on behalf of the requester
• Records the agency doesn’t possess

Requests must ask for specific existing records — not for answers, explanations, or newly created analyses.

The Nine FOIA Exemptions

FOIA contains nine exemptions allowing agencies to withhold specific categories of information. Understanding these exemptions helps predict whether a request is likely to succeed and how to frame requests to minimize the risk of denial.

Exemption 1 — National security Records classified to protect national defense or foreign policy. Classification must follow executive order standards. This is frequently invoked by intelligence agencies and the military.

Exemption 2 — Internal agency rules Internal personnel rules and administrative procedures with no public interest in disclosure. Rarely used in isolation.

Exemption 3 — Statutory exemptions Records specifically exempted by another federal statute. If Congress has passed a separate law prohibiting disclosure, FOIA cannot override it. Examples include certain tax return information and grand jury materials.

Exemption 4 — Trade secrets and confidential business information Sensitive commercial information submitted by companies to government agencies — trade secrets, proprietary business data, financial information. Commonly invoked when requesting records about regulated industries.

Exemption 5 — Internal deliberations (deliberative process privilege) Draft documents, pre-decisional deliberations, internal legal advice, and attorney-client communications within agencies. Designed to protect internal decision-making processes. One of the most commonly invoked exemptions.

Exemption 6 — Personal privacy Information that would constitute a clearly unwarranted invasion of personal privacy. Applies to personnel files, medical records, and similar personal information. Agencies must balance the privacy interest against the public interest in disclosure.

Exemption 7 — Law enforcement records Law enforcement records may be withheld if disclosure would: interfere with active enforcement proceedings, deprive a person of a fair trial, constitute an unwarranted invasion of personal privacy, reveal confidential sources, disclose law enforcement techniques, or endanger individuals. Commonly invoked for FBI and DOJ records.

Exemption 8 — Financial institution supervision Records related to the examination, operating, or condition reports of financial institutions prepared for regulatory agencies. Invoked by banking regulators.

Exemption 9 — Geological and well data Geological and geophysical information and data about wells. Narrowly applicable — rarely invoked.

Source: FOIA Exemptions — 5 U.S.C. § 552(b) — Cornell LII

Important: Exemptions allow agencies to withhold records — they do not require it. Agencies have discretion to release exempt records when disclosure serves the public interest and no harm would result. Some agencies exercise this discretion more freely than others.

Step-by-Step: How to File a FOIA Request

Step 1 — Check Existing Reading Rooms First

Before filing a request, check whether the records you need have already been released. Federal agencies must publish frequently requested records in electronic FOIA reading rooms. Searching these can save weeks or months.

• FBI Vault (vault.fbi.gov) — thousands of previously released FBI documents
• CIA FOIA Reading Room (cia.gov/readingroom) — declassified CIA documents
• DOJ FOIA Library (justice.gov/oip/foia-library) — DOJ releases
• ProPublica FOIA Library — aggregates government documents released to journalists

Step 2 — Identify the Correct Agency

FOIA requests must be submitted to the agency that maintains the records. Submitting to the wrong agency delays the process. If you’re unsure which agency holds a record, consider:

• Which agency would have investigated, regulated, or documented the subject?
• Which agency’s jurisdiction covers the activity in question?
• FOIA.gov (foia.gov) has a directory of federal agency FOIA contacts

Examples:

• FBI investigative records → FBI FOIA office (fbi.gov/services/information-management/foipa)
• Environmental enforcement actions → EPA FOIA office (epa.gov/foia)
• Immigration records → DHS or USCIS FOIA office
• SEC enforcement files → SEC FOIA office (sec.gov/foia)

Step 3 — Write a Specific, Well-Described Request

The quality of your request determines the quality of the response. Vague requests produce delayed responses, overbroad results, or denials. Specific requests produce targeted, timely responses.

What to include:

• A clear description of the specific records you’re requesting
• Relevant date ranges (narrow the time period as much as possible)
• Known identifiers — case numbers, names, investigation titles, program names
• Your preferred format for receiving records (electronic preferred — faster and cheaper)
• A fee waiver request if applicable (see fee section below)

Sample request language:

Pursuant to the Freedom of Information Act, 5 U.S.C. § 552, I am requesting access to the following records:

All reports, memoranda, emails, and correspondence related to [specific subject/investigation/program] from [start date] to [end date]. If case or reference numbers are applicable, the relevant identifier is [number if known].

I am requesting records in electronic format. If any portion of this request is denied, please provide all non-exempt records and specify the exemptions claimed for withheld material.

[If applicable: I am a journalist/researcher/educational institution and request a fee waiver on the grounds that disclosure is in the public interest because [brief explanation].]

Please confirm receipt of this request and provide a tracking number.

What to avoid:

• “All records related to [broad subject]” — too vague, will be delayed or rejected
• Requests spanning decades without narrowing by date or subject
• Asking the agency to conduct research or answer questions

Step 4 — Submit the Request

Most agencies accept FOIA requests through:

• Their own online FOIA portal (most common and fastest)
• FOIA.gov — the central federal FOIA portal that routes requests
• Email to the agency’s designated FOIA email address
• Certified mail to the agency’s FOIA office

FOIA.gov (foia.gov) — submit and track federal FOIA requests across agencies. The portal maintains a directory of all federal agency FOIA contacts and submission portals.

Step 5 — Track Your Request

Most agencies assign a tracking number. Use it to check status through the agency’s FOIA portal or through FOIA.gov. Response timelines vary significantly by agency and request complexity.

Step 6 — Review the Response

The agency may respond by:

• Releasing records in full
• Releasing records with redactions (partial response)
• Denying the request and citing specific exemptions
• Stating that no responsive records exist
• Referring the request to another agency with responsive records

Review the response carefully. If records are partially withheld, the agency must identify which exemptions apply to which portions. If the response seems incomplete or improperly withheld, the appeal process is the next step.

Step 7 — Appeal If Necessary

If a request is denied, partially denied, or inadequately processed, file an administrative appeal.

Appeals must typically be submitted within 90 days of the denial. Address the appeal to the agency’s FOIA Appeals Officer (a different official than the FOIA officer who processed the original request).

In the appeal, explain specifically why the denial was improper — identify which exemptions were incorrectly applied or why the response was inadequate.

If the administrative appeal is denied, the requester may file a lawsuit in federal district court challenging the denial. Several nonprofit organizations including the Reporters Committee for Freedom of the Press provide legal assistance for FOIA litigation.

FOIA Fees and Fee Waivers

Agencies may charge fees for FOIA requests depending on the requester category and the scope of the request.

Requester categories:

Fee waivers: Requesters can ask for a fee waiver by demonstrating that disclosure is in the public interest — that it will contribute to public understanding of government operations and is not primarily for commercial benefit. Journalists, researchers, and nonprofit organizations frequently qualify.

Fee waiver request language:

I request a fee waiver on the grounds that disclosure is in the public interest. The requested records will contribute to public understanding of [agency activity] because [brief explanation]. This request is not made for commercial purposes.

FOIA and OSINT Research

FOIA is a valuable tool in open-source intelligence investigations because it provides access to primary government documents that no database, commercial service, or aggregator can supply. Investigative journalists routinely use FOIA to obtain documents that become the basis for significant reporting. Researchers use FOIA to access regulatory files, enforcement histories, and internal agency communications.

For OSINT practitioners, FOIA complements database research: searchable databases surface what’s already been published; FOIA obtains what hasn’t been released yet. The combination produces the most comprehensive picture of government activity around a specific subject.

MuckRock (muckrock.com) — a platform that helps journalists and researchers file, track, and share FOIA requests. MuckRock maintains a public library of previously filed requests and released documents, which can surface records already obtained by others researching the same subjects.

→ Related guide: OSINT Tools for Beginners

State FOIA Equivalents: Sunshine Laws and Open Records Acts

Every U.S. state has its own public records law governing access to state and local government records. These laws operate independently of federal FOIA and apply to state agencies, county governments, municipal offices, school boards, and other state and local entities.

How to file a state records request: Search “[state name] public records request” or “[state name] open records act” to find the relevant agency portal or form. Most state agencies accept requests by email or online form. Response timelines and exemptions vary by state.

For state court records specifically — these are accessed through court portals directly, not through state open records requests. FOIA and state sunshine laws are for executive branch agency records, not for court records.

→ Related guide: How Public Records Are Organized in the United States\

→ Related guide: Are Public Records Really Public?

FOIA Tools and Resources

When FOIA Is and Isn’t the Right Tool

Many researchers waste time filing FOIA requests for records that are already available through searchable databases. PACER covers federal court records. County portals cover property records. State court portals cover state criminal and civil records. FOIA is specifically for federal executive agency records that aren’t already publicly accessible through these systems.

→ Related guide: Best Government Databases for Background Research

Common Mistakes That Delay or Derail FOIA Requests

Submitting to the wrong agency. FOIA requests sent to an agency that doesn’t hold the records will be transferred or rejected. Research which agency has jurisdiction over the subject before filing. FOIA.gov’s agency directory helps identify the correct submission point.

Being too vague. Requests for “all records related to [broad subject]” are difficult to process, often delayed, and sometimes rejected as insufficiently specific. Narrow the request by date range, subject, case number, or document type. A focused request for three specific documents will be processed far faster than a sweeping request for “all records.”

Asking questions instead of requesting records. FOIA covers existing records — not questions to be answered or research to be conducted. Reframe question-based requests as requests for the specific documents that would contain the information you’re seeking.

Ignoring FOIA reading rooms. Many records have already been released through prior FOIA requests and are freely available in agency reading rooms. Checking FBI Vault, CIA Reading Room, and MuckRock’s library before filing can save weeks of waiting.

Not requesting a fee waiver when eligible. Journalists, researchers, and educational institutions often qualify for fee waivers. Not requesting one means paying fees that could have been waived. Include a fee waiver request in every initial submission if there’s any reasonable basis for eligibility.

Giving up after a denial. FOIA denials are not final. Administrative appeals succeed frequently — particularly when exemptions were applied improperly or the response was incomplete. File the appeal within the stated timeframe (usually 90 days) before the opportunity expires.

Frequently Asked Questions

Who can file a FOIA request? Anyone — U.S. citizens, foreign nationals, corporations, nonprofits, journalists, researchers, and private individuals. No reason or justification is required.

How long does a FOIA request take? By statute, agencies must acknowledge requests within 20 business days. In practice, complex requests take much longer — months to years for heavily redacted or classified material. Check the agency’s FOIA backlog disclosure page for current processing times.

Can agencies charge fees for FOIA requests? Yes, but fees depend on the requester category. Journalists and educational institutions are exempt from search and review fees. All requesters receive the first 100 pages of duplication free. Fee waivers are available when disclosure serves the public interest.

What happens if an agency says it has no responsive records? The agency is stating that a reasonable search found no records matching the request. This may be accurate — or it may indicate a search that was too narrow. If you believe records should exist, an administrative appeal can challenge the adequacy of the search.

Can I use FOIA to get records about myself? Yes — and for personal records, filing under both FOIA and the Privacy Act of 1974 simultaneously often produces more complete responses. The Privacy Act gives individuals additional rights to access and correct their own federal records.

Does FOIA apply to state government? No. Federal FOIA applies only to federal executive branch agencies. State and local government records are governed by each state’s own open records law — called sunshine laws, public records acts, or open records acts depending on the state.

Final Thoughts

The Freedom of Information Act is one of the most powerful tools available to anyone who needs to understand what the federal government has documented about a specific subject, person, or event. It provides access to primary government documents — investigative files, agency communications, enforcement records, internal analyses — that no database, search engine, or commercial service can supply.

The key to effective FOIA research is specificity: identify the right agency, describe the specific records precisely, narrow by date and subject, check reading rooms before filing, and appeal denials rather than accepting them as final. The process takes patience — but the documents produced are often unlike anything available through any other channel.

For records that don’t require a FOIA request — court records, property records, business registrations — the government databases covered in the related guides below are faster and more accessible. FOIA fills the gap for everything else.

Related Guides

• What Are Public Records?
• What Makes a Record Public?
• Are Public Records Really Public?
• Best Government Databases for Background Research
• How Public Records Are Organized in the United States
• OSINT Tools for Beginners

Disclaimer: This article is for informational purposes only and does not constitute legal advice. FOIA procedures and agency policies may change over time. Researchers should verify submission requirements with the relevant agency before filing a request. This article may contain affiliate links — we may earn a commission if you purchase through them, at no extra cost to you.