Federal FOIA Personnel Exemption (5 USC § 552(b)(6) and (b)(7)(C))

What Exemptions 6 and 7(C) do

The federal Freedom of Information Act (5 U.S.C. § 552) took effect in 1966. It's the federal sunshine law: anyone can request federal records, and the agency has to produce them unless an exemption applies.

The Act has nine exemptions. Two of them can keep a federal employee's personal information, including a federal law enforcement officer's, out of a FOIA release:

• Exemption 6 (§ 552(b)(6)): covers "personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy."
• Exemption 7(C) (§ 552(b)(7)(C)): covers law enforcement records whose disclosure "could reasonably be expected to constitute an unwarranted invasion of personal privacy."

Both protect your privacy. The difference in wording matters. Exemption 6 uses a higher bar, "clearly unwarranted." Exemption 7(C) uses a lower one, "could reasonably be expected." Congress wrote 7(C) broader on purpose, with law enforcement officers and their operational privacy in mind.

For federal agents (FBI, DEA, USMS, ATF, HSI), federal prosecutors, and federal correctional officers, these two exemptions are one of the legal hooks that can keep your home address out of a FOIA disclosure. It is not automatic. The agency has to apply it.

What the exemptions cover

Information typically withheld:

• Home addresses and personal phone numbers
• Names of family members
• Photographs, especially ones that identify undercover or covert personnel
• Medical records
• Performance evaluations, disciplinary records, and similar personnel-file material
• Personal email addresses
• Social Security numbers

Information the exemptions don't automatically cover:

• Your title, rank, and duty station
• Public-facing badge or identification number
• Public-record salary information at higher GS levels
• Court testimony and on-record statements

The line is drawn case by case. The agency's FOIA officer weighs the requester's interest in disclosure against the employee's privacy interest. A court reviews that call if someone challenges it.

The balancing test

When a FOIA request reaches records that contain personal information about a federal employee, the agency decides three things:

1. Is there a privacy interest? For personnel data, almost always yes.
2. Is there a public interest in disclosure? Under FOIA, public interest means the public's interest in understanding how government operates, not general curiosity.
3. Does the public interest outweigh the privacy interest?

If the privacy interest wins, the agency redacts or withholds. If the public interest wins, the agency releases.

The leading Supreme Court case on this balancing test is U.S. Department of Justice v. Reporters Committee for Freedom of the Press, 489 U.S. 749 (1989). The Court held that under Exemption 7(C), law enforcement records may be withheld when disclosure could reasonably be expected to invade personal privacy. The case also established "practical obscurity": information that is technically public, such as records scattered across courthouse files, agency databases, and old newspaper archives, keeps a privacy interest because pulling it into one place makes it newly accessible.

That is what data brokers do. They gather scattered public records into a single profile and sell access to it. Reporters Committee recognized that kind of aggregation as its own privacy harm, which is the legal foundation for officer privacy in the data-broker era.

The Court also held that FOIA's public interest is about how government works, not about what individuals do. That's why agencies generally withhold home addresses and family information without much pushback.

The Court reinforced this in National Archives and Records Administration v. Favish, 541 U.S. 157 (2004), which extended privacy interests to surviving family members. That's why family information is generally withheld even after a federal officer's death.

How to invoke

The exemptions are agency tools, not employee tools. You can't invoke them directly. What you can do is make sure the agency knows to apply them when a request lands on your records.

The practical steps:

1. Identify your agency's FOIA officer. Every federal agency has one. FOIA.gov keeps a directory of agency FOIA contacts.
2. Send a written request. Ask that any personally identifying information in your personnel file, home address, personal phone, family member names, personal email, and photos, be flagged for Exemption 6 and 7(C) review on any future FOIA request that touches your records. Cite the exemption sections.
3. Specify what to flag. Address, phone, family, and any photos not already public. The more concrete the list, the easier it is for the FOIA officer to apply it consistently.
4. Update it when things change. A new address, promotion, or new role means re-filing. The flag only helps if the information it covers is current.
5. Keep a copy. Save the signed request, the date it was received, and the name of the FOIA officer. If a disclosure later happens that should have been withheld, that's your record.

This is not a guarantee. The FOIA officer still runs the balancing test on each request. But the flag means your records get reviewed with the privacy interest already documented, rather than released because no one thought to apply the exemption.

For federal law enforcement, the DOJ FOIA Guide chapter on Exemption 7(C) is the authoritative interpretation. What counts as a law enforcement record can vary by agency, so read the section that matches your role.

Enforcement reality

Agencies vary. Some apply the exemptions broadly. Some over-release.

When an agency over-releases, the remedy is litigation, and it runs through a different statute. The Privacy Act, 5 U.S.C. § 552a gives an individual a private right of action against a federal agency for the improper disclosure of records about them.

The Privacy Act sets a minimum award of $1,000 for a willful or intentional violation, plus attorney's fees and costs. The Supreme Court held in Doe v. Chao, 540 U.S. 614 (2004) that you must prove some actual damages to qualify for that minimum. Filing one means suing your own agency, and it requires proof of actual damages, so it is a demanding remedy rather than a routine one.

Where it doesn't reach

The FOIA exemptions are federal-agency tools. They don't reach:

1. State and local agencies. State public-records laws have their own exemption structures. See /states for state-specific carve-outs.
2. Court records. Federal court records (PACER) and state court records run under different rules. A court filing that already lists your home address stays public unless the court agrees to seal it.
3. Records held by third parties. If a contractor, vendor, or local partner holds records about you, federal FOIA exemptions don't bind them.
4. Information already public. If your home address is on a broker site because it was already in a public deed transfer, FOIA can't pull it back.
5. Voluntary releases. The exemption is permissive, so the agency can still release covered records if it chooses. And exposure often bypasses FOIA entirely: in the 2020 Portland federal-officer doxxing wave, officers were identified through social-media and reverse-image matching, then located through broker sites, not through any agency FOIA release.

What we do

We can't file the exemption flag with your agency. That's a one-page letter you send through your chain.

What we do is work the broker layer the exemption was meant to keep clean: the people-search sites that scrape your home address from public records. We find the listings, file opt-out requests across the major data-broker and people-search sites, and keep checking, because removed records often come back. We'll tell you clearly when a site needs something from you.

If you're a federal law enforcement officer or agent, run both layers. File the exemption letter with your agency, and remove your information from the broker sites on the outside. Broker removal for individuals handles that outside layer. A free scan shows what's exposed today.