32 CFR 518.13 - FOIA exemptions.
The following types of records may be withheld in whole or in part from public disclosure under the FOIA, unless otherwise prescribed by law. A discretionary release of a record to one requester shall prevent the withholding of the same record under a FOIA exemption if the record is subsequently requested by someone else. However, a FOIA exemption may be invoked to withhold information that is similar or related to that which has been the subject of a discretionary release. In applying exemptions, the identity of the requester and the purpose for which the record is sought are irrelevant with the exception that an exemption may not be invoked where the particular interest to be protected is the requester's interest. However, if the subject of the record is the requester for the record and the record is contained in a PA system of records, it may only be denied to the requester if withholding is both authorized by AR 25-71 and by a FOIA exemption.
(a) Number 1 (5 U.S.C. 552 (b)(1)). Those properly and currently classified in the interest of national defense or foreign policy, as specifically authorized under the criteria established by Executive Order and implemented by regulations, such as DoD 5200.1-R. Although material is not classified at the time of the FOIA request, a classification review may be undertaken to determine whether the information should be classified. The procedures in DoD 5200.1-R apply. If the information qualifies as exemption 1 information, there is no discretion regarding its release. In addition, this exemption shall be invoked when the following situations are apparent:
(1) The fact of the existence or nonexistence of a record would itself reveal classified information. In this situation, Army Activities shall neither confirm nor deny the existence or nonexistence of the record being requested. A “refusal to confirm or deny” response must be used consistently, not only when a record exists, but also when a record does not exist. Otherwise, the pattern of using a “no record” response when a record does not exist, and a “refusal to confirm or deny” when a record does exist will itself disclose national security information.
(2) Compilations of items of information that are individually unclassified may be classified if the compiled information reveals additional association or relationship that meets the standard for classification under an existing executive order for classification and DoD 5200.1-R, and is not otherwise revealed in the individual items of information.
(b) Number 2 (5 U.S.C. 552(b)(2)). Those related solely to the internal personnel rules and practices of the DoD or any of its Components. This exemption has two profiles, high (b)(2) and low (b)(2). Activities are encouraged to consult the DA, FOIA/PA Office, and the U.S. DoJ “Freedom of Information Act Guide & Privacy Act Overview” for a more in depth discussion on the legal history of the use of the low (b)(2) exemption. When only a minimal Government interest would be affected (administrative burden), Army Activities shall apply the sound legal basis standard regarding disclosure of the information. Army Activities shall apply the low 2 exemption as applicable.
(1) Records qualifying under high (b)(2) are those containing or constituting statutes, rules, regulations, orders, manuals, directives, instructions, security classification guides, and sensitive but unclassified information related to America's homeland security and critical infrastructure information the release of which would allow circumvention of these records thereby substantially hindering the effective performance or present an unwarranted risk of adverse impact on the ability of other agencies to protect other important records of a significant function of the DA. Examples include:
(i) Those operating rules, guidelines, and manuals for Army investigators, inspectors, auditors, or examiners that must remain privileged in order for the Army Activity to fulfill a legal requirement;
(ii) Personnel and other administrative matters, such as examination questions and answers used in training courses or in the determination of the qualifications of candidates for employment, entrance on duty, advancement, or promotion; and
(iii) Computer software, the release of which would allow circumvention of a statute, DoD or Army rules, regulations, orders, manuals, directives, or instructions. In this situation, the use of the software must be closely examined to ensure a circumvention possibility exists.
(2) Records qualifying under the low (b)(2) profile are those that are trivial and housekeeping in nature for which there is no legitimate public interest or benefit to be gained by release, and it would constitute an administrative burden to process the request in order to disclose the records. Examples include rules of personnel's use of parking facilities or regulation of lunch hours, statements of policy as to sick leave, and administrative data such as file numbers, mail routing stamps, initials, data processing notations, brief references to previous communications, and other like administrative markings. Army Activities shall apply the low 2 exemption as applicable.
(c) Number 3 (5 U.S.C. 552(b)(3)). Those concerning matters that a statute specifically exempts from disclosure by terms that permit no discretion on the issue, or in accordance with criteria established by that statute for withholding or referring to particular types of matters to be withheld. The DA, FOIA/PA Office, maintains a list of (b)(3) statutes used within the DoD, and provides updated lists of these statutes to Army Activities on a periodic basis. A few examples of such statutes are:
(1) Personnel in Overseas, Sensitive, or Routinely Deployable Units: nondisclosure of personally identifying information, 10 U.S.C. 130(b). Additionally, the names and duty addresses (postal and/or e-mail) of Army military and civilian personnel who are assigned to units that are sensitive, routinely deployable, or stationed in foreign territories can constitute a clearly unwarranted invasion of personal privacy and may also be withheld in accordance with FOIA Exemption 3. Names and duty addresses (postal and/or e-mail) published in telephone directories, organizational charts, rosters and similar materials for personnel assigned to units that are sensitive, routinely deployable, or stationed in foreign territories are withholdable under this exemption, in accordance with 10 U.S.C. 130 ‘Personnel in Overseas, Sensitive, or Routinely Deployable Units’;
(2) Classification and Declassification of Restricted Data, 42 U.S.C. 2162;
(3) Disclosure of Classified Information, 18 U.S.C. 798(a);
(4) Authority to Withhold from Public Disclosure Certain Technical Data, 10 U.S.C. 130 and DoDD 5230.25;
(5) Confidentiality of Medical Quality Assurance Records: Qualified Immunity for Participants, 10 U.S.C. 1102(f);
(6) Physical Protection of Special Nuclear Material: Limitation on Dissemination of Unclassified Information, 10 U.S.C. 128;
(7) Protection of Intelligence Sources and Methods, 50 U.S.C. 403-3(c)(6);
(8) Prohibition on Release of Contractor Submitted Proposals, 10 U.S.C. 2305(g);
(9) Restrictions on Disclosing and Obtaining Contractor Bid or Proposal Information or Source Selection Information, 41 U.S.C. 423; and
(10) Secrecy of Certain Inventions and Filing Applications in a Foreign Country, 35 U.S.C. 181-188. Any records containing information relating to inventions that are the subject of patent applications on which Patent Secrecy Orders have been issued.
(d) Number 4 (5 U.S.C. 552(b)(4)). Those containing trade secrets or commercial or financial information that an Army Activity receives from a person or organization outside the Government with the understanding that the information or record will be retained on a privileged or confidential basis in accordance with the customary handling of such records. Records within the exemption must contain trade secrets, or commercial or financial records, the disclosure of which is likely to cause substantial harm to the competitive position of the source providing the information, impair the Government's ability to obtain necessary information in the future, or impair some other legitimate Government interest. Commercial or financial information submitted on a voluntary basis, absent any exercised authority prescribing criteria for submission is protected without any requirement to show competitive harm. If the information qualifies as exemption 4 information, there is no discretion in its release. Examples include:
(1) Commercial or financial information received in confidence in connection with loans, bids, contracts, or proposals set forth in or incorporated by reference in a contract entered into between the Army Activity and the offeror that submitted the proposal, as well as other information received in confidence or privileged, such as trade secrets, inventions, discoveries, or other proprietary data. Additionally, when the provisions of 10 U.S.C. 2305(g) and 41 U.S.C. 423 are met, certain proprietary and source selection information may be withheld under exemption 3;
(2) Statistical data and commercial or financial information concerning contract performance, income, profits, losses, and expenditures, if offered and received in confidence from a contractor or potential contractor;
(3) Personal statements given in the course of inspections, investigations, or audits, when such statements are received in confidence from the individual and retained in confidence because they reveal trade secrets or commercial or financial information normally considered confidential or privileged;
(4) Financial data provided in confidence by private employers in connection with locality wage surveys that are used to fix and adjust pay schedules applicable to the prevailing wage rate of employees within the DA;
(5) Scientific and manufacturing processes or developments concerning technical or scientific data or other information submitted with an application for a research grant, or with a report while research is in progress;
(6) Technical or scientific data developed by a contractor or subcontractor exclusively at private expense, and technical or scientific data developed in part with Federal funds and in part at private expense, wherein the contractor or subcontractor has retained legitimate proprietary interests in such data in accordance with 10 U.S.C. 2320-2311 and DoD Federal Acquisition Regulation Supplement (DFARS), subpart 27.4. Technical data developed exclusively with Federal funds may be withheld under Exemption Number 3 if it meets the criteria of 10 U.S.C. 130 and DoDD 5230.25;
(7) Computer software, which is copyrighted in accordance with 17 U.S.C. 106, ‘Exclusive rights in Copyrighted Works,’ the disclosure of which would have an adverse impact on the potential market value of a copyrighted work; and
(8) Proprietary information submitted strictly on a voluntary basis, absent any exercised authority prescribing criteria for submission. Examples of exercised authorities prescribing criteria for submission are statutes, Executive Orders, regulations, invitations for bids, requests for proposals, and contracts. Submission of information under these authorities is not voluntary.
(e) Number 5 (5 U.S.C. 552(b)(5)). Those containing information considered privileged in litigation, primarily under the deliberative process privilege. Except as provided in paragraphs (e)(1) through (5) of this section, internal advice, recommendations, and subjective evaluations, as contrasted with factual matters that are reflected in deliberative records pertaining to the decision-making process of an agency, whether within or among agencies (as defined in 5 U.S.C. 552(e)), or within or among Army Activities. In order to meet the test of this exemption, the record must be both deliberative in nature, as well as part of a decision-making process. Merely being an internal record is insufficient basis for withholding under this exemption. Also potentially exempted are records pertaining to the attorney-client privilege and the attorney work-product privilege. Discretionary disclosure decisions should be made only after full and deliberate consideration of the institutional, commercial, and personal privacy interests that could be implicated by disclosure of the information.
(1) Examples of the deliberative process include:
(i) The non-factual portions of staff papers, to include after-action reports, lessons learned, and situation reports containing staff evaluations, advice, opinions, or suggestions;
(ii) Advice, suggestions, or evaluations prepared on behalf of the DA by individual consultants or by boards, committees, councils, groups, panels, conferences, commissions, task forces, or other similar groups that are formed for the purpose of obtaining advice and recommendations;
(iii) Those non-factual portions of evaluations by DoD Component personnel of contractors and their products;
(iv) Information of a speculative, tentative, or evaluative nature or such matters as proposed plans to procure, lease or otherwise acquire and dispose of materials, real estate, facilities or functions, when such information would provide undue or unfair competitive advantage to private personal interests or would impede legitimate government functions;
(v) Trade secret or other confidential research development, or commercial information owned by the Government, where premature release is likely to affect the Government's negotiating position or other commercial interest;
(vi) Those portions of official reports of inspection, reports of the Inspector Generals, audits, investigations, or surveys pertaining to safety, security, or the internal management, administration, or operation of one or more Army Activities, when these records have traditionally been treated by the courts as privileged against disclosure in litigation; and
(vii) Planning, programming, and budgetary information that is involved in the defense planning and resource allocation process.
(2) If any such intra- or inter-agency record or reasonably segregable portion of such record hypothetically would be made available routinely through the discovery process in the course of litigation with the Army, then it should not be withheld under the FOIA. If, however, the information hypothetically would not be released at all, or would only be released in a particular case during civil discovery where a party's particularized showing of need might override a privilege, then the record may be withheld. Discovery is the formal process by which litigants obtain information from each other for use in the litigation. Consult with legal counsel to determine whether exemption 5 material would be routinely made available through the discovery process.
(3) Intra- or inter-agency memoranda or letters that are factual, or those reasonably segregable portions that are factual, are routinely made available through discovery, and shall be made available to a requester, unless the factual material is otherwise exempt from release, inextricably intertwined with the exempt information, so fragmented as to be uninformative, or so redundant of information already available to the requester as to provide no new substantive information.
(4) A direction or order from a superior to a subordinate, though contained in an internal communication, generally cannot be withheld from a requester if it constitutes policy guidance or a decision, as distinguished from a discussion of preliminary matters or a request for information or advice that would compromise the decision-making process.
(5) An internal communication concerning a decision that subsequently has been made a matter of public record must be made available to a requester when the rationale for the decision is expressly adopted or incorporated by reference in the record containing the decision.
(f) Number 6 (5 U.S.C. 552(b)(6)). Information in personnel and medical files, as well as similar personal information in other files, and lists of personally identifying information of Army personnel, that, if disclosed to a requester, other than the person about whom the information is about, would result in a clearly unwarranted invasion of personal privacy. Release of information about an individual contained in a Privacy Act System of Records that would constitute a clearly unwarranted invasion of privacy is prohibited, and could subject the releaser to civil and criminal penalties. If the information qualifies as exemption 6 information, there is no discretion regarding its release.
(1) Examples of other files containing personal information similar to that contained in personnel and medical files include:
(i) Those compiled to evaluate or adjudicate the suitability of candidates for civilian employment or membership in the Armed Forces, and the eligibility of individuals (civilian, military, or contractor employees) for security clearances, or for access to particularly sensitive classified information; and
(ii) Files containing reports, records, and other material pertaining to personnel matters in which administrative action, including disciplinary action, may be taken.
(2) Army components shall ordinarily withhold lists of names (including active duty military, civilian employees, contractors, members of the National Guard and Reserves, and military dependents) and other personally identifying information, including lists of e-mail addresses of personnel currently or recently assigned within a particular component, unit, organization, or office within the Army. Home addresses, including private e-mail addresses, are normally not releasable without the consent of the individuals concerned. This includes lists of home addresses and military quarters' addressees without the occupant's name.
(i) Privacy Interest. A privacy interest may exist in personal information even though the information has been disclosed at some place and time. If personal information is not freely available from sources other than the Federal Government, a privacy interest exists in its nondisclosure. The fact that the Federal Government expended funds to prepare, index and maintain records on personal information, and the fact that a requester invokes FOIA to obtain these records indicates the information is not freely available.
(ii) The right to privacy of deceased persons is not entirely settled, but the majority rule is that death extinguishes their privacy rights. However, particularly sensitive, graphic, personal details about the circumstances surrounding an individual's death may be withheld when necessary to protect the privacy interests of surviving family members. Even information that is not particularly sensitive in and of itself may be withheld to protect the privacy interests of surviving family members if disclosure would rekindle grief, anguish, pain, embarrassment, or cause a disruption of their peace of minds. Additionally, the deceased's social security number should be withheld since it is used by the next of kin to receive benefits. Disclosures of the deceased's social security number may be made to the immediate next of kin.
(iii) A clearly unwarranted invasion of the privacy of third parties identified in a personnel, medical or similar record constitutes a basis for deleting those reasonably segregable portions of that record. When withholding third party personal information from the subject of the record and the record is contained in a Privacy Act system of records, consult with legal counsel.
(iv) This exemption also applies when the fact of the existence or nonexistence of a responsive record would itself reveal personally private information, and the public interest in disclosure is not sufficient to outweigh the privacy interest. In this situation, Army Activities shall neither confirm nor deny the existence or nonexistence of the record being requested. This is a “Glomar” response, and exemption 6 must be cited in the response. Additionally, in order to ensure personal privacy is not violated during referrals, Army Activities shall coordinate telephonically or in person with other Army Activities or DoD Components or Federal Agencies before referring a record that is exempt under the “Glomar” concept. See Phillippi v. CIA, 546 F.2d 1009 (DC Cir. 1976).
(v) A “refusal to confirm or deny” response must be used consistently, not only when a record exists, but also when a record does not exist. Otherwise, the pattern of using a “no records” response when a record does not exist and a “refusal to confirm or deny” when a record does exist will itself disclose personally private information. Refusal to confirm or deny should not be used when:
(A) The person whose personal privacy is in jeopardy has provided the requester a waiver of his or her privacy rights;
(B) The person initiated or directly participated in an investigation that lead to the creation of an agency record seeks access to that record; or
(C) The person whose personal privacy is in jeopardy is deceased, the Agency is aware of that fact, and disclosure would not invade the privacy of the deceased's family.
(g) Number 7 (5 U.S.C. 552(b)(7)). Records or information compiled for law enforcement purposes, i.e., civil, criminal, or military, including the implementation of Executive Orders or regulations issued pursuant to law. This exemption may be invoked to prevent disclosure of documents not originally created for, but later gathered for law enforcement purposes. With the exception of parts (C) and (F), this exemption is discretionary. If information qualifies as exemption (7)(C) or (7)(F) information, there is no discretion in its release.
(1) This exemption applies, however, only to the extent that production of such law enforcement records or information could result in the following:
(i) Could reasonably be expected to interfere with law enforcement proceedings (5 U.S.C. 552(b)(7)(A));
(ii) Would deprive a person of the right to a fair trial or to an impartial adjudication (5 U.S.C. 552(b)(7)(B));
(iii) Could reasonably be expected to constitute an unwarranted invasion of the personal privacy of a living person, or to surviving family members of an individual identified in such a record (5 U.S.C. 552(b)(7)(C));
(iv) This exemption also applies when the fact of the existence or nonexistence of a responsive record would itself reveal personally private information, and the public interest in disclosure is not sufficient to outweigh the privacy interest. In this situation, Activities shall neither confirm nor deny the existence or nonexistence of the record being requested. This is a “Glomar” response, and exemption (7)(C) must be cited in the response. Additionally, in order to ensure personal privacy is not violated during referrals, Army Activities shall coordinate with other Army Activities or DoD Components or Federal Agencies before referring a record that is exempt under the “Glomar” concept;
(v) A “refusal to confirm or deny” response must be used consistently, not only when a record exists, but also when a record does not exist. Otherwise, the pattern of using a “no records” response when a record does not exist and a “refusal to confirm or deny” when a record does exist will itself disclose personally private information;
(vi) Refusal to confirm or deny should not be used when the person whose personal privacy is in jeopardy has provided the requester with a waiver of his or her privacy rights; or the person whose personal privacy is in jeopardy is deceased, and the Agency is aware of that fact and disclosure would not invade the privacy of the deceased's family;
(vii) Could reasonably be expected to disclose the identity of a confidential source, including a source within DoD, a State, local, or foreign agency or authority, or any private institution that furnishes the information on a confidential basis; and could disclose information furnished from a confidential source and obtained by a criminal law enforcement authority in a criminal investigation or by an agency conducting a lawful national security intelligence investigation (5 U.S.C. 552(b)(7)(D));
(viii) Would disclose techniques and procedures for law enforcement investigations or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such disclosure could reasonably be expected to risk circumvention of the law (5 U.S.C. 552(b)(7)(E)); or
(ix) Could reasonably be expected to endanger the life or physical safety of any individual (5 U.S.C. 552(b)(7)(F)).
(2) Some examples of exemption 7 are:
(i) Statements of witnesses and other material developed during the course of the investigation and all materials prepared in connection with related Government litigation or adjudicative proceedings;
(ii) The identity of firms or individuals being investigated for alleged irregularities involving contracting with the DoD when no indictment has been obtained or any civil action filed against them by the United States; and
(iii) Information obtained in confidence, expressed or implied, in the course of a criminal investigation by a criminal law enforcement agency or office within an Army Activity or a DoD Component, or a lawful national security intelligence investigation conducted by an authorized agency or office within an Army Activity or a DoD Component. National security intelligence investigations include background security investigations and those investigations conducted for the purpose of obtaining affirmative or counterintelligence information.
(3) The right of individual litigants to investigative records currently available by law (such as, the Jencks Act, 18 U.S.C. 3500), is not diminished.
(4) Excluded from exemption 7 are two situations applicable to DoD. (Activities considering invoking an exclusion based on the following scenarios should first consult through legal counsel, to the DoJ, Office of Information and Privacy (DoJ OIP).
(i) Whenever a request is made that involves access to records or information compiled for law enforcement purposes, and the investigation or proceeding involves a possible violation of criminal law where there is reason to believe that the subject of the investigation or proceeding is unaware of its pendency, and the disclosure of the existence of the records could reasonably be expected to interfere with enforcement proceedings, Activities may, during only such times as that circumstance continues, treat the records or information as not subject to the FOIA. In such a situation, the response to the requester will state that no records were found.
(ii) Whenever informant records maintained by a criminal law enforcement organization within an Army Activity or a DoD Component under the informant's name or personal identifier are requested by a third party using the informant's name or personal identifier, the Activity may treat the records as not subject to the FOIA, unless the informant's status as an informant has been officially confirmed. If it is determined that the records are not subject to 5 U.S.C. 552(b)(7), the response to the requester will state that no records were found.
(h) Number 8 (5 U.S.C. 552 (b)(8)). Those contained in or related to examination, operation or condition reports prepared by, on behalf of, or for the use of any agency responsible for the regulation or supervision of financial institutions.
(i) Number 9 (5 U.S.C. 552 (b)(9)). Those containing geological and geophysical information and data (including maps) concerning wells.