Proactive Disclosure or Strategic Concealment? The Compliance Risks of Selective Transparency

Proactive disclosure has long been framed as the gold standard of government and institutional transparency. Release records before anyone asks, the thinking goes, and you demonstrate a genuine commitment to openness. But a more troubling pattern has emerged in recent years—one in which organizations treat voluntary disclosure not as a transparency obligation, but as a reputation management instrument. The result is a compliance environment where the appearance of openness masks a carefully curated information architecture designed to control the narrative rather than serve the public interest.

For compliance officers tasked with implementing information access frameworks, this distinction is not merely philosophical. It carries concrete legal, regulatory, and institutional risk.

What Proactive Disclosure Is Supposed to Do

Under the Freedom of Information Act, agencies are required to make certain categories of records available to the public without waiting for a formal request. Section 552(a)(2) of FOIA mandates proactive posting of final opinions, policy statements, staff manuals, and frequently requested records. The E-Government Act of 2002 reinforced this requirement by directing agencies to use the internet as a primary vehicle for routine disclosure.

The intent is straightforward: reduce the administrative burden of individual FOIA requests by placing commonly sought records in the public domain. When implemented faithfully, proactive disclosure accelerates access, reduces processing backlogs, and builds institutional credibility.

The problem arises when organizations treat these requirements as a floor to be gamed rather than a standard to be met.

The Arbitrage Dynamic: Releasing What Helps, Withholding What Hurts

Selective proactive disclosure operates on a simple asymmetry. An organization voluntarily publishes records that cast its operations in a favorable light—audit reports with positive findings, policy documents that reflect well-designed procedures, correspondence that demonstrates responsiveness. Meanwhile, records that reveal internal dysfunction, legal exposure, or politically sensitive decisions remain inaccessible unless a requester knows precisely what to ask for and how to ask for it.

This creates what might be called a disclosure arbitrage problem. Organizations with the institutional knowledge and legal resources to manage their information portfolio strategically can shape public understanding of their operations in ways that technically comply with the letter of transparency law while systematically undermining its purpose.

The asymmetry is compounded by the fact that most requesters—journalists, researchers, advocacy organizations, members of the public—operate without full knowledge of what records exist. If an organization never acknowledges the existence of a document, a requester cannot request it. Proactive disclosure of selected materials can actually obscure the gaps by creating a false impression of comprehensive openness.

Legal Gray Areas That Enable the Practice

Federal FOIA does not require agencies to disclose everything proactively. The statute identifies specific categories of records subject to mandatory posting, but it leaves significant discretion in how agencies define, organize, and prioritize their disclosure activities. That discretion is where selective transparency gains its foothold.

Agencies are not legally obligated to explain why certain records were proactively released while others were not. There is no affirmative duty to disclose the universe of records that exist within a given subject area. And the exemptions that govern withholding in response to formal requests—Exemptions 5 and 6, covering deliberative process and personal privacy, respectively, are among the most frequently invoked—can also inform decisions about what not to proactively release, without triggering formal litigation.

The Office of Information Policy at the Department of Justice has issued guidance encouraging agencies to apply a presumption of openness, but guidance is not enforceable in the same way that statutory requirements are. Agencies that selectively disclose face limited formal accountability unless a requester can demonstrate that specific withheld records fall within mandatory disclosure categories.

State-level open records laws present a similarly fragmented picture. Some states have enacted affirmative disclosure requirements that go beyond federal minimums, but enforcement mechanisms vary widely, and the practical ability of state oversight bodies to audit proactive disclosure practices remains limited in most jurisdictions.

Ethical Implications for Compliance Programs

For compliance officers, the ethical dimensions of selective disclosure deserve serious attention, independent of the legal exposure. A compliance program that technically satisfies FOIA requirements while strategically managing public perception is not, in any meaningful sense, a transparency program. It is a reputation management program operating under the cover of legal compliance.

This distinction matters because it shapes organizational culture in ways that have downstream consequences. When legal and compliance teams internalize the idea that their role is to minimize disclosure rather than facilitate access, that orientation tends to manifest in how requests are interpreted, how exemptions are applied, and how litigation risk is assessed. The result is a compliance environment that is adversarial toward transparency rather than supportive of it.

There is also a credibility dimension that organizations frequently underestimate. Sophisticated requesters—investigative journalists and public interest litigants in particular—have become increasingly adept at identifying the contours of selective disclosure. When the gap between what an organization voluntarily publishes and what formal requests eventually uncover becomes visible, the reputational damage is often more severe than the underlying records would have caused on their own.

Regulatory Pushback and Emerging Scrutiny

Federal oversight bodies have begun to pay closer attention to the gap between proactive disclosure rhetoric and practice. Congressional oversight inquiries have increasingly focused not just on whether agencies respond to formal FOIA requests within statutory timeframes, but on whether their proactive disclosure programs are substantive or performative.

The National Security Archive and other transparency advocacy organizations have documented patterns of selective disclosure at multiple federal agencies, providing empirical grounding for arguments that proactive posting practices are being used strategically rather than in good faith. These findings have informed both legislative proposals and agency-level reform discussions.

At the state level, several attorneys general offices have signaled heightened interest in whether public bodies are using proactive disclosure as a mechanism to reduce the discoverability of sensitive records. In states with robust open records enforcement infrastructure, this scrutiny is beginning to translate into formal investigations and compliance directives.

Building a Disclosure Program That Holds Up to Scrutiny

Organizations that want to insulate themselves from both legal risk and reputational exposure should approach proactive disclosure as a genuine transparency function rather than a strategic communications exercise. In practical terms, this means several things.

First, disclosure decisions should be documented. When records are selected for proactive posting, the criteria used to make that selection should be recorded and defensible. When records are not proactively posted, the rationale should be grounded in legitimate legal considerations rather than reputational ones.

Second, compliance programs should include periodic audits of proactive disclosure practices, not just formal FOIA request processing. The question to ask is not only whether the organization is meeting its minimum legal obligations, but whether its voluntary disclosure activity is consistent with the presumption of openness that information access law is designed to promote.

Third, legal and compliance teams should resist the conflation of FOIA compliance and litigation risk management. These are related functions, but they are not the same function. A compliance program that treats every disclosure decision primarily through the lens of litigation exposure is structurally incapable of genuine transparency.

The Broader Compliance Imperative

Selective proactive disclosure is, at its core, a failure of institutional integrity dressed up as legal compliance. For organizations operating under federal and state information access frameworks, the standard is not whether disclosure can be minimized within the bounds of the law—it is whether the organization is genuinely committed to the public's right to know.

Compliance officers who understand this distinction, and build programs that reflect it, are not just reducing legal exposure. They are building the kind of institutional credibility that withstands scrutiny over time. That is what genuine transparency looks like—and it is what information access law was designed to require.