FOIA Request Process: Filing and Tracking Public Records Requests

The Freedom of Information Act, and its state-level equivalents, is the most underused tool in civic OSINT. Most investigators lose on three things: choosing the wrong agency, writing a request that is too broad to fulfill, and failing to push back when a fee or exemption is used to kill the request. This tutorial walks through all three.

Who this is for

Beginner

Journalists, academic researchers, civic investigators, and accountability organisations working with US federal or state public records. The principles generalise to UK FOI, EU access-to-documents, and similar regimes.

What you'll need

An email address you can check reliably for months.
Basic understanding of which level of government (federal, state, local) holds the records you want.
Optional: a MuckRock account, which handles filing, tracking, and publication in one workflow.

How it works

FOIA creates a statutory right of access to federal agency records, with nine enumerated exemptions. Agencies must respond within 20 business days (often extended). A good request names a specific category of records, a specific custodian, and a specific time range. A bad request asks for "everything about X", which agencies routinely reject as unreasonably broad.

Step-by-step walkthrough

Decide federal vs state vs local. If your target is a federal agency (DHS, DoJ, DoD), file under federal FOIA. If it is a police department, school district, or state agency, file under the state public-records act. Local records usually go through the municipal clerk or equivalent.
Identify the correct office within the agency. Each federal agency has a FOIA office, and larger agencies have component-level offices (FBI, ICE, and CBP each have their own within DHS/DoJ). Filing at the wrong component causes weeks of delay. The agency's FOIA contact page and the federal FOIA.gov agency finder resolve this.
Scope the request narrowly. A useful request specifies:
- Records custodian (office or program).
- Record types (emails, memos, contracts, incident reports, training materials).
- Date range (narrow).
- Subject or keywords.
- Format preference (native electronic format, not printed PDFs of emails).

Draft the letter. Keep it under one page. Use this skeleton:

[Date]

[Agency FOIA Officer]
[Address]

Dear FOIA Officer,

Under the Freedom of Information Act, 5 U.S.C. § 552, I request
copies of the following records:

1. All [record type] sent or received by [custodian] between
   [start date] and [end date] that reference [keyword or topic].
2. [Second specific category, if any].

I am a [journalist / researcher / member of the public] requesting
these records for [non-commercial / educational / journalistic]
purposes. I request a fee waiver because disclosure is likely to
contribute significantly to public understanding of [topic] and is
not primarily in my commercial interest.

Please provide records in their native electronic format. I am
available for a clarifying conversation at [email] and [phone].

Sincerely,
[Your name]

File through the correct channel. Most federal agencies accept requests via their FOIA portal or https://www.foia.gov/. State portals vary. MuckRock (https://www.muckrock.com/) files on your behalf and tracks the request publicly.
Track deadlines. Log the filing date, the statutory response date, and every communication. If the agency misses the deadline, you can treat it as a constructive denial and appeal — or sue, in extreme cases.
Respond to estimates and narrowing requests. Agencies often reply with a fee estimate or a request to narrow. Respond quickly. Narrowing is usually a signal that the request is workable; ignoring the email kills it.
Appeal exemptions. When records are withheld, the agency cites a specific exemption (b)(1) through (b)(9). File an administrative appeal within the statutory window (usually 90 days). Appeals reverse withholdings more often than people expect, especially for overbroad (b)(5) deliberative-process claims.
Publish and index. When records arrive, preserve the original transmission, hash the files, and publish them in a searchable form. The metadata extraction tutorial covers processing scanned PDFs.

Common pitfalls

Asking for "all records". This is the fastest way to have a request rejected or sit for years.
Filing at the top of the agency. Large agencies route requests down, adding weeks. File at the component level where possible.
Not claiming a fee waiver. If you qualify, say so in the original request. Asking later is an uphill battle.
Accepting the first denial. Many withholdings are reflexive. A well-argued appeal can release substantial material.
Losing the paper trail. Every letter, every email, every phone call must be logged. Courts and appeals officers care about the timeline.

Verifying your findings

Records received under FOIA are primary sources, but they are not self-authenticating. Confirm the agency's production letter, hash each file, and cross-reference the content against independent records (court filings, contracts on USAspending.gov, state registrations). The analysis phase guide covers document-by-document verification workflow.

Apply this in practice

The following the flight logs case study walks through structured extraction from records like those typically obtained via FOIA and subpoena. For analysing large caches of released documents, use the Subthesis legal document analysis tool.