Federal FOIA Personnel Exemption (5 USC § 552(b)(6) and (b)(7)(C))

What Exemptions 6 and 7(C) actually do

The federal Freedom of Information Act (5 U.S.C. § 552) was enacted in 1966. It's the federal sunshine law, anyone can request federal records and the agency has to produce them unless an exemption applies.

There are nine exemptions. Two of them protect federal employees, including federal law enforcement officers, from having their personal information released through a FOIA request:

• Exemption 6 (§ 552(b)(6)) covers "personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy."
• Exemption 7(C) (§ 552(b)(7)(C)) covers law enforcement records the disclosure of which "could reasonably be expected to constitute an unwarranted invasion of personal privacy."

Both are about your privacy. The difference matters. Exemption 6 applies a higher threshold, "clearly unwarranted." Exemption 7(C) applies a lower threshold, just "could reasonably be expected." That second framing is intentional. Congress wrote 7(C) broader because it was specifically thinking about law enforcement officers and the operational privacy they need to do the job safely.

For federal LE, federal agents (FBI, DEA, USMS, ATF, HSI), federal prosecutors, federal correctional officers, this is one of the legal hooks that keeps your home address out of FOIA disclosures. It is not automatic. The agency has to actually apply it.

What the exemptions cover

The kinds of information typically withheld:

• Home addresses and personal phone numbers
• Names of family members
• Photographs (especially if they identify undercover or covert personnel)
• Medical records
• Performance evaluations, disciplinary records, and similar personnel-file material
• Personal email addresses
• Social Security numbers
• Names of officers in undercover or sensitive operations

What the exemptions DON'T automatically cover:

• Your title, rank, and duty station
• Public-facing badge or identification number
• Public-record salary information at higher GS levels
• Court testimony and on-record statements

The line gets drawn case by case. The agency's FOIA officer applies a balancing test, the requester's interest in disclosure versus the employee's privacy interest. Courts review that balancing if it gets challenged.

The balancing test

When a FOIA request lands on records that contain personal information about a federal employee, the agency has to decide:

1. Is there a privacy interest? Almost always yes for personnel data.
2. Is there a public interest in disclosure? Public interest under FOIA means specifically the public's interest in understanding government operations, not generic curiosity.
3. Does the public interest outweigh the privacy interest?

If the privacy interest wins, the agency redacts or withholds. If the public interest wins, the agency releases.

The foundational Supreme Court case on FOIA's privacy balancing test is U.S. Department of Justice v. Reporters Committee for Freedom of the Press, 489 U.S. 749 (1989). The Court held that under Exemption 7(C), law enforcement records may be withheld when disclosure "could reasonably be expected to constitute an unwarranted invasion of personal privacy." Critically, Reporters Committee introduced the concept of "practical obscurity", information that is technically public (a person's individual records scattered across courthouse files, agency databases, and old newspaper archives) retains a privacy interest when aggregation makes it newly accessible. That concept is the legal foundation for officer privacy in the modern data-broker era. The broker's value-add is precisely the aggregation that Reporters Committee recognized as a fresh privacy harm.

The court also held that public-interest FOIA disclosure is about how government works, not about what individuals do. That ruling is the reason agencies typically protect home addresses and family information without much pushback.

The court reinforced the protection again in Favish v. National Archives and Records Administration (2004), which extended privacy interests to surviving family members. That's why family information is generally withheld even after a federal officer's death.

How to invoke

The exemptions are agency tools, not employee tools. You can't directly invoke them. What you can do is make sure the agency knows to apply them when a request lands on you.

The practical move:

1. Identify your agency's FOIA officer. Every federal agency has one. The DOJ keeps a list of FOIA contacts by agency.
2. Send a written request. Ask that any personally identifying information in your personnel file, home address, personal phone, family member names, personal email, photos, be flagged for Exemption 6 / 7(C) review on any future FOIA request that touches your records. Reference the exemption sections by statutory citation.
3. Specify what should be flagged. Address. Phone. Family. Photos that aren't already publicly distributed. Be specific. The more concrete the list, the easier it is for the FOIA officer to apply consistently.
4. Update when things change. Move? Promotion? New role? Re-file. The flag is only useful if the information it covers is current.
5. Keep a copy. Photo of the signed request, date received, name of the FOIA officer who took it. If a disclosure happens later that should have been withheld, that's your evidence.

This isn't a guarantee. The FOIA officer still applies the balancing test on each request. But the flag means your records are reviewed with the privacy interest documented, instead of being released because no one thought to apply the exemption.

For federal LE specifically, the DOJ FOIA Guide chapter on Exemption 7(C) is the authoritative interpretation. Worth reading the section that matches your role, court precedent on what counts as a law enforcement record varies by agency.

Enforcement reality

Agencies vary. Some apply the exemptions broadly. Some over-release. The Department of Defense, FBI, and DEA are generally aggressive about applying 7(C). Civilian agencies with smaller LE components are more uneven.

When an agency over-releases, the remedy is litigation. The employee whose data was released can sue under the Privacy Act, 5 U.S.C. § 552a, which is a separate statute that does provide a private right of action. The Privacy Act covers improper disclosures by federal agencies of records about an individual.

Statutory damages under the Privacy Act run a $1,000 minimum per willful violation, plus actual damages, plus attorney's fees. Litigation is rare because most agencies apply the FOIA exemptions correctly, and because pursuing a Privacy Act claim against your own employer is a career calculation.

Where it doesn't reach

The FOIA exemptions are federal-agency tools. They don't reach:

1. State and local agencies. State public-records laws have their own exemption structures. See /states for state-specific carve-outs.
2. Court records. Federal court records (PACER) and state court records run under different rules. Court filings that already include your home address are public unless the court agrees to seal them.
3. Records held by third parties. If a contractor, vendor, or local partner holds records about you, federal FOIA exemptions don't bind them.
4. Information already publicly disseminated. If your home address appears on a broker site because it was already in a public deed transfer, FOIA can't pull it back.
5. Voluntary releases. The exemption is permissive. The agency can still release covered records if it chooses. The 2020 Portland federal-officer doxxing wave showed how voluntary releases of names and assignments can still expose officers, the FOIA exemption only covers what the agency formally withholds.

What we do

We can't file the exemption flag with your agency, that's a one-page letter you send through your chain. We do clear the broker layer that the FOIA exemption was supposed to keep clean, the people-search sites that scrape your home address from sources that should have been protected. Standard opt-outs across 200+ broker sites, re-checked every two weeks. Because the FOIA exemption was supposed to keep that data out of the broker channel, ongoing broker-side coverage for federal agents is the workaround when it doesn't.

If you're a federal LE officer or agent and you want belt-and-suspenders coverage, file the FOIA exemption letter with your agency and run the broker sweep on the outside. Both layers. Free scan shows what's exposed today.