Denial at Your Peril: The Hidden Financial and Legal Costs of Getting FOIA Refusals Wrong

There is a persistent misconception in some corners of public-sector compliance: that denying a FOIA request is the conservative choice. The reasoning, such as it is, goes that disclosure creates risk while refusal preserves it. This logic inverts reality. An incorrect denial does not neutralize risk—it concentrates it, defers it, and frequently multiplies it.

The financial and institutional consequences of wrongful FOIA refusals are well-documented, yet organizations continue to make the same categories of errors. Understanding why those errors occur, and what they ultimately cost, is foundational to building a FOIA compliance program that is genuinely protective—rather than one that only appears cautious on the surface.

What a Wrongful Denial Actually Costs

The most visible cost of an improper FOIA denial is litigation. Under 5 U.S.C. § 552(a)(4)(B), a requester may file suit in federal district court to compel disclosure. If the court finds that the agency improperly withheld records, it may order production—and under § 552(a)(4)(E), the court may award attorney fees and litigation costs to a requester who has substantially prevailed.

Attorney fee awards in FOIA cases are not nominal. In several high-profile matters, prevailing requesters have recovered fees exceeding $500,000. When an agency loses at trial and then faces an appeal, total litigation expenditures can reach seven figures. For smaller agencies or government contractors operating on constrained legal budgets, a single contested denial can consume a substantial portion of annual compliance resources.

Beyond direct litigation costs, wrongful denials generate secondary consequences that are harder to quantify but equally damaging. Congressional oversight attention frequently follows high-profile FOIA lawsuits. Inspectors general have opened investigations into agencies whose denial practices have attracted judicial criticism. And in an environment where public trust in institutions is already fragile, a well-publicized case of improper withholding can inflict reputational damage that persists long after the legal matter is resolved.

The Decision Errors That Drive Most Wrongful Denials

A review of FOIA litigation outcomes reveals that wrongful denials tend to cluster around a relatively small number of recurring errors. Identifying these patterns is the first step toward eliminating them.

Overreliance on boilerplate exemption claims. Exemptions under FOIA are specific and narrow. Courts have repeatedly held that agencies must provide more than a conclusory assertion that a record falls within a particular exemption. Vaughn indexes—detailed justifications linking each withheld document or portion to a specific exemption and a reasoned explanation—are required when litigation ensues. Agencies that deny requests with generic exemption language, without conducting the individualized analysis that the law demands, are particularly vulnerable when those denials are challenged.

Failure to conduct an adequate search. A significant proportion of successful FOIA lawsuits do not turn on whether a withheld record should have been disclosed—they turn on whether the agency's search for responsive records was adequate in the first place. An inadequate search is itself a FOIA violation. Compliance officers must ensure that search protocols are documented, that all reasonably likely record locations are canvassed, and that search terms and custodians are selected through a defensible methodology.

Misapplication of Exemption 5. The deliberative process privilege, which falls under Exemption 5, is one of the most frequently misapplied protections in FOIA practice. It covers predecisional, deliberative communications—not every internal document that touches on policy matters. Courts have grown increasingly skeptical of broad Exemption 5 claims, and the 2016 FOIA Improvement Act codified a foreseeable harm standard that requires agencies to demonstrate not merely that a record could fall within an exemption, but that disclosure would cause a specific, articulable harm. Agencies that have not updated their Exemption 5 analysis to incorporate the foreseeable harm standard are operating on outdated legal ground.

Ignoring segregability obligations. Even where an exemption legitimately applies to part of a record, agencies must release any reasonably segregable non-exempt portions. Wholesale withholding of documents without a genuine segregability analysis is one of the most common bases for judicial orders compelling re-processing. It is also one of the most preventable errors, requiring only that reviewers approach each document with the question: what portions of this record could be released without disclosing the protected information?

A Framework for Reducing Denial Errors

Organizations that are serious about reducing their exposure to wrongful denial litigation need more than good intentions—they need a structured review process with clear accountability at each stage.

Implement a multi-level review protocol. High-stakes denials—those involving significant volumes of records, politically sensitive subject matter, or requests from known litigation-active parties—should not rest on a single reviewer's judgment. A tiered review process, in which an initial determination is checked by a senior compliance officer or agency counsel before it is transmitted, catches errors before they become final agency actions.

Train reviewers on the foreseeable harm standard. Since the 2016 amendments, the question is not simply whether an exemption could apply—it is whether disclosure would foreseeably harm an interest the exemption was designed to protect. Reviewers who have not internalized this standard are making legally insufficient determinations. Regular training that addresses current judicial interpretations, not just the text of the statute, is essential.

Audit denial rates and outcomes systematically. Compliance programs that track only response times—and not denial rates, appeal outcomes, and litigation results—are missing the most important performance signals. A denial rate that is significantly higher than peer agencies, or a pattern of appeals being granted at the administrative level, is a leading indicator of systematic review problems. These metrics should be reviewed quarterly and reported to agency leadership.

Create a pre-denial consultation mechanism. Before issuing a denial on a novel or borderline request, compliance officers should have a clear pathway to consult with agency counsel and, where appropriate, with the Office of Information Policy at the Department of Justice. OIP guidance, while not binding, reflects current judicial trends and provides a defensible basis for the agency's position. Agencies that bypass consultation on difficult requests and improvise a legal theory are taking an unnecessary gamble.

Recalibrating the Risk Calculus

The underlying error in treating denial as the safe default is a failure to account for the full range of costs that wrongful refusals generate. Litigation is expensive. Attorney fee awards are real. Congressional attention is disruptive. And the erosion of public trust, while difficult to price, is ultimately an institutional liability that compliance programs exist to prevent.

A well-functioning FOIA compliance program does not seek to maximize disclosure any more than it seeks to minimize it. It seeks to make accurate, legally defensible determinations—consistently, efficiently, and with full awareness of the consequences that flow from getting those determinations wrong.

The cost of 'no,' when 'no' is unjustified, is almost always higher than the cost of getting the answer right the first time.