Government Secrecy and Privacy Rights Under FOIA and the Privacy Act

This content is for informational and educational purposes only and is not legal, financial, or tax advice. No attorney-client relationship is created by reading or using this article. Federal, state, and local rules may differ and may change without notice. A qualified professional can review specific circumstances. The author and publisher assume no liability for actions taken based on this content.

Key Facts

Federal level: FOIA gives any person a statutory right to seek records from executive branch agencies, and nine exemptions allow withholding in defined situations.
Federal level: FOIA also requires agencies to make certain materials available electronically, including final opinions, policy statements, staff manuals, and some repeatedly requested records.
Federal level: The Privacy Act limits disclosure of records in a system of records and generally requires consent or a listed exception before release.
National overview: DOJ guidance treats FOIA and the Privacy Act as separate but overlapping statutes, especially when a person seeks access to records about that same person.
National overview: FOIA does not apply to state or local agencies, and each state uses its own public-records statutes and procedures.
State level: California’s Secretary of State says any person may seek public records, segregable nonexempt material must still be released, and the office generally gives an initial response within 10 days with a possible 14-day extension in unusual circumstances.

Last reviewed: May 2026. Legal rules, forms, deadlines, and procedures can change by jurisdiction, agency, and court system.

Contents

The legacy ABA headline points to a lasting legal tension
FOIA is the federal disclosure law, but it is not absolute
The Privacy Act protects records about individuals
Why first party records often get analyzed under both statutes
State public records law follows its own rules
The California example shows why state law must stay separate from federal law
Why the topic still matters in 2026 and beyond
Related legal information
Sources

The legacy ABA headline points to a lasting legal tension

The legacy ABA headline points to a lasting legal tension in legal information: how much government information belongs in public view, and how much can stay protected because it contains personal or sensitive material. The historical piece is useful as a snapshot, but the current legal lines come from FOIA, the Privacy Act, and state public-records law, not from the 2013 event itself.

That separation matters because government secrecy and privacy rights are not the same idea. FOIA is the federal disclosure statute. The Privacy Act is the federal privacy statute for records about individuals. State public-records laws add another layer, and they do not follow FOIA automatically.

FOIA is the federal disclosure law, but it is not absolute

FOIA gives the public a statutory right to seek records from executive branch agencies. The statute also gives agencies nine exemptions that allow records to be withheld in whole or in part. That is the basic balance at the center of the debate: disclosure is the rule, but Congress built in specific limits.

FOIA also requires agencies to make certain categories of material available in electronic form. Those materials include final opinions, policy statements and interpretations, staff manuals and instructions, and some records that are likely to be requested again. Official sources control the answer because the statutory text, not commentary, sets the rule.

The Privacy Act protects records about individuals

The Privacy Act focuses on records in a system of records that relate to a particular individual. As codified, it generally bars disclosure without prior written consent unless a listed exception applies. It also contains provisions that stop agencies from using one statute to block access that the other statute would otherwise allow.

That structure is why the Privacy Act and FOIA often appear together in the same access dispute. The two statutes overlap, but they do different work. FOIA looks outward toward public access. The Privacy Act looks inward toward records that identify a person and the conditions under which those records may be disclosed.

Topic	FOIA	Privacy Act
Main purpose	Public access to government records	Protection of records about individuals
Core rule	Records are generally available unless an exemption applies	Disclosure is generally barred unless consent or an exception applies
Common use	Public-interest access to agency records	First-party access to personal records
Legal effect	Nine exemptions can limit release	Consent and listed exceptions control release
Practical overlap	Can still require release when no exemption applies	Can still require access where the statute gives it

Why first party records often get analyzed under both statutes

DOJ guidance explains that the two statutes overlap, but not entirely. In first-party matters, agencies often review the same records under both laws because a record about one person can raise both disclosure and privacy issues at the same time. A FOIA exemption does not end the analysis by itself if the Privacy Act still points toward release, and the Privacy Act does not erase FOIA’s separate exemptions either.

That overlap is part of what made the ABA discussion so durable. The legal system tries to fit two values into one structure: public accountability and personal privacy. In practice, the same record can sit at the intersection of both values, which is why the federal rules often require a careful statute-by-statute review.

State public records law follows its own rules

FOIA does not govern state or local agencies. The National Archives says each state has its own public-access statutes. That means a state record that would be handled one way under a federal access statute may be handled differently under state law.

California offers one concrete example. The California Secretary of State says any person can seek public records, exempt material can be withheld, and reasonably segregable nonexempt portions still must be released. The same FAQ also describes a general 10-day determination period and a possible 14-day extension in unusual circumstances. That is a state-specific process, not a national deadline.

The California example shows why state law must stay separate from federal law

California is useful here only as an example of how one state handles access, timing, and segregation of exempt material. It does not stand for every state. Some states use different deadlines, different exemptions, and different procedures. The broader point is simple: state public-records law varies, and federal FOIA does not supply the answer for state agencies.

Why the topic still matters in 2026 and beyond

The old ABA program framed a live question that still matters today because government records now move through digital systems, shared databases, and electronic reading rooms. FOIA still pushes toward disclosure. The Privacy Act still protects personal records. State law still adds another layer of variation. Official sources, not legacy commentary, control the legal boundary in each setting.

For readers trying to understand the topic at a glance, the simplest summary is this: FOIA governs federal access, the Privacy Act governs personal records in federal systems of records, and state public-records law follows its own path. That is the legal structure behind the older ABA discussion and the current law that replaced it as the controlling source of truth.