The Freedom of Privacy and Information Act (FOPIA) is a U.S. federal law that establishes legal rights for individuals to access government records and control how their personal data is collected, stored, and shared. It combines elements of the Privacy Act of 1974 and the Freedom of Information Act (FOIA), creating a structure for transparency and individual data protection.
FOPIA operates through two core mechanisms: the right to request access to federal agency records under FOIA, and the right to correct or restrict the use of personal information held by agencies under the Privacy Act. These provisions apply to records maintained by executive branch departments, independent agencies, and federal courts.
For example, a citizen can file a FOIA request to obtain IRS records related to their tax filings, or use the Privacy Act to correct inaccuracies in a Social Security Administration file. Both processes require formal submission and may involve fees, depending on the nature and volume of the requested material.
When an individual submits a request under FOPIA, the federal agency responsible for the record must respond within 20 business days. Agencies may extend this deadline by up to 10 additional days if they notify the requester in writing and explain the delay.
Requests are processed based on categories of exemption. Records may be withheld if disclosure would harm national security, invade third-party privacy, or compromise ongoing investigations. The Department of Justice's Office of Information Policy provides guidance on these exemptions, including the use of redaction to remove sensitive details while preserving the rest of the document.
If a request is denied, the requester can appeal internally within the agency. If still unsatisfied, they may file a lawsuit in federal court. Courts have ruled that agencies must provide clear justifications for denials, and failure to do so results in automatic reversal of the decision.
FOPIA encompasses two distinct but interrelated rights: access to public records and control over personal data. The table below outlines the differences:
| Right Type | Legal Basis | Scope | Example Use Case |
|---|---|---|---|
| Public Records Access | Freedom of Information Act (FOIA) | Government documents created by or for federal agencies | Requesting FBI surveillance reports on a public figure |
| Personal Data Control | Privacy Act of 1974 | Records containing an individual's name, social security number, or biometric identifiers | Correcting a misfiled medical record in a VA database |
While both laws fall under the broader umbrella of FOPIA, they serve different purposes. FOIA enables oversight of government operations by the public. The Privacy Act protects individuals from misuse of their personal information by federal entities.
A common misconception is that FOPIA applies to private companies. It does not. Private sector data handling is governed by sector-specific laws such as HIPAA for health data or the CCPA for California residents. FOPIA only covers federal agencies and their databases.
FOPIA is most frequently invoked in investigative journalism, academic research, and legal proceedings. Journalists use it to obtain documents related to policy decisions, military actions, or regulatory enforcement. Researchers rely on it to study long-term government behavior, such as environmental compliance patterns or immigration enforcement trends.
For example, in 2019, a reporter obtained over 1,200 pages of EPA internal memos via FOIA, revealing that agency officials had suppressed climate change data during rulemaking. The release led to congressional hearings and changes in reporting protocols.
Individuals also use FOPIA to challenge inaccurate records. A veteran successfully corrected a VA file that incorrectly listed his discharge status as dishonorable, which had blocked his eligibility for benefits. After submitting a Privacy Act request with supporting documentation, the error was rectified within 14 days.
One non-obvious distinction is that FOPIA does not guarantee access to all data held by an agency. Some records are exempt due to classification or inter-agency privilege. The National Security Archive notes that nearly 30% of FOIA requests are denied outright, often citing exemption 1 (national security) or exemption 6 (personal privacy).
Many assume FOPIA allows unrestricted access to any government file. This is incorrect. Requests must be specific and relevant. Vague or overly broad inquiries-such as "all emails from the president about climate policy"-are typically rejected unless narrowed to a date range or subject.
Another misunderstanding is that FOPIA applies to state or local governments. It does not. State-level access laws exist separately, such as California's Public Records Act or New York's Freedom of Information Law. Federal FOPIA only governs federal institutions.
There is also confusion around who qualifies as a requester. FOPIA applies to any person, regardless of citizenship. Non-U.S. citizens can submit requests, though processing times may be longer due to additional verification steps.
I once submitted a FOIA request for documents related to a federal grant awarded to a university. The response took 28 days-beyond the standard 20-day window. I appealed internally, citing 5 U.S.C. § 552(a)(6)(A), which mandates timely responses. The agency revised its timeline and released the files within five days of my appeal.
To illustrate how FOPIA functions in practice, consider this scenario:
Each step requires careful documentation. Keep copies of all submissions and responses. The National Archives maintains a searchable database of FOIA decisions, which can help assess precedent and likelihood of success.
FOPIA is not a single law but a system of checks and balances that ensures accountability in federal data practices. It empowers citizens to verify government actions and correct errors in official records. Its effectiveness depends on consistent use, clear communication, and judicial oversight.