Arkansas public records FOIA redaction rules and PII
In Arkansas, the “custodian of records” bears the burden of proving that a specific exemption applies, not the citizen requesting the file.
The Arkansas Freedom of Information Act (FOIA) is widely regarded as one of the most robust and “citizen-friendly” transparency laws in the United States. Its preamble explicitly states that public business should be performed in an open and public manner so that electors may be advised of the performance of public officials. However, this presumption of openness collides violently with the modern necessity of protecting Personally Identifiable Information (PII). Custodians of records today walk a tightrope: release too little, and you face criminal misdemeanor charges; release too much, and you violate constitutional privacy rights defined by the Arkansas Supreme Court.
The core friction lies in the lack of a blanket “privacy” exemption in the statutory text. Unlike federal law, which offers broad exclusions for “personnel and medical files,” Arkansas law requires a granular analysis. A “personnel record” is treated differently than an “employee evaluation record,” and a tax return is treated differently than a police dashcam video. The custodian cannot simply withhold an entire file because it contains a social security number; they must surgically redact the sensitive data and release the remainder. This “duty to segregate” is often ignored by overwhelmed agencies, leading to unnecessary litigation.
This article provides a definitive operational guide to PII redactions under Arkansas law. We will dissect the critical distinction between “personnel records” and “evaluation records,” explain the mandatory 24-hour notice rule for employees, and detail the “McCambridge test” that judges use to balance public interest against personal privacy. We will move beyond the statute text to practical workflows for handling high-stakes data releases without triggering liability.
Critical Redaction Checkpoints in Arkansas:
- The “24-Hour Rule”: If a request touches personnel records, the custodian must notify the subject employee within 24 hours so they can seek an AG opinion or injunction.
- The “Three-Day” Clock: Records in active use or storage must be produced within 3 business days. Redaction time is included in this window, not added to it.
- Evaluation vs. Personnel: Evaluation records (performance reviews) are almost always closed unless the employee was fired/suspended and there is a compelling public interest.
- Constitutional Privacy: Even if no statute protects the data, the McCambridge test may block release if it is “highly offensive to a reasonable person.”
See more in this category: Digital & Privacy Law
In this article:
Last updated: October 26, 2023.
Quick definition: The legal process of obscuring exempt PII (Personally Identifiable Information) from public records prior to release under the Arkansas Freedom of Information Act (FOIA).
Who it applies to: All “custodians” of public records (state agencies, cities, counties, school districts) and any citizen requesting such records.
Time, cost, and documents:
- Standard Deadline: “Immediately” or within 3 business days.
- Cost: Actual cost of reproduction only (no labor/search fees).
- Key Documents: The Record itself, Redaction Log, AG Opinion (optional).
Key takeaways that usually decide disputes:
Further reading:
- Whether the information is a “clearly unwarranted invasion of personal privacy.”
- The distinction between a “performance evaluation” and a general HR document.
- The existence of a “final administrative resolution” in disciplinary matters.
Quick guide to Arkansas FOIA Redactions
- Presumption of Openness: Assume everything is public unless you can point to a specific statute that says it is not. Doubt is resolved in favor of disclosure.
- No “Search” Fees: You cannot charge for the time spent reviewing or redacting files. You can only charge for the paper/media cost.
- SSNs are Always Out: Social Security numbers are exempt under both state and federal law. Redact them immediately.
- The “Constitutional” Shield: Even if the FOIA doesn’t list it, the Arkansas Supreme Court says you can’t release things like intimate photos or medical details that would shock a reasonable person.
- Format Choice: The requester gets to choose the format (paper, PDF, Excel) if the custodian has the capability to provide it.
- Attorney General Opinions: In personnel disputes, the AG acts as a quasi-judicial referee. Their opinions are not binding law but are highly persuasive in court.
Understanding Arkansas FOIA in practice
The Arkansas FOIA creates a unique environment where the custodian of records acts as the first line of defense for privacy. Unlike other states where “privacy” is a broad umbrella, Arkansas divides personal information into distinct legal buckets. The most contentious bucket is “Personnel Records” vs. “Employee Evaluation Records.” This distinction is not merely semantic; it determines the burden of proof. Personnel records (timesheets, payroll, applications) are open unless their release would constitute a “clearly unwarranted invasion of personal privacy.” This is a high bar for privacy. It means your salary is public, but your medical leave form is likely redacted.
By contrast, “Employee Evaluation or Job Performance Records” are closed by default. They only become open if two conditions are met: (1) The employee has been suspended or terminated, and (2) There has been a final administrative resolution of that suspension or termination. If a police officer resigns before the internal affairs investigation is complete, the file often stays closed forever because there was no “final resolution” of suspension/termination. This loophole is a frequent source of media litigation in Arkansas.
The “McCambridge” Privacy Test:
- Step 1: Is there a legitimate public interest in the information? (e.g., How public money is spent, how police behave).
- Step 2: Would the disclosure be “highly offensive to a reasonable person”? (e.g., Photos of a victim’s body, intimate medical details).
- Result: If the privacy interest outweighs the public interest, the information is redacted under the Constitutional Right to Privacy, overriding the FOIA statute.
Legal and practical angles that change the outcome
The “Custodian’s Dilemma” arises when a record is requested that contains PII of a third party who is not a public employee. For example, a police report listing the phone numbers of witnesses. Arkansas Code § 25-19-105(b)(13) specifically exempts home addresses and personal phone numbers of non-elected public employees, but it is silent on private citizens in many contexts. However, the constitutional right to privacy (McCambridge test) fills this gap. Custodians routinely redact private citizen contact info to avoid facilitating harassment, arguing that “contact info” sheds no light on the government’s operations.
Another practical angle is the “Vaughn Index” concept. While not strictly mandated by Arkansas statute in the same way as federal law, best practice dictates that when a custodian denies a record, they should provide a log describing what was withheld and why. Simply saying “exempt” is insufficient. A proper denial states: “Redacted lines 4-10 on page 2 pursuant to Ark. Code Ann. § 25-19-105(b)(12) as medical information.” This transparency often prevents lawsuits by showing the requester that the redaction was targeted, not arbitrary.
Workable paths parties actually use to resolve disputes
When a dispute arises over personnel records, the parties often utilize the Attorney General Opinion mechanism. Before releasing a personnel record that might infringe on privacy, the custodian must notify the employee. That employee (or the custodian) can then request an opinion from the AG. The AG will review the documents in camera (privately) and issue a non-binding opinion on whether they should be released. This “safe harbor” step allows custodians to get legal cover before hitting “send” on a controversial file.
For non-personnel disputes (e.g., police dashcam footage), the path is often a lawsuit in Circuit Court. Arkansas FOIA cases are expedited; the court must schedule a hearing within seven days. This rapid judicial review forces custodians to be very sure of their exemptions, as they can be dragged before a judge in under a week and forced to pay the requester’s attorney fees if they lose.
Practical application: The Redaction Workflow
A systematic approach is the only way to handle FOIA requests efficiently without leaking PII. Do not rely on manual review alone.
- Receive and Log: Timestamp the request immediately. This starts the 3-day clock. Identify if the records are “in active use/storage.”
- Search and Retrieve: Gather all responsive documents. Do not filter them yet.
- The “Bucket” Sort: Separate the documents into three piles:
- Open: Contracts, emails about business, budgets.
- Exempt: Tax returns, medical records, unpublished drafts, security plans.
- Hybrid (Redactable): Emails with personal cell numbers, personnel files with SSNs.
- Notification (If Personnel): If the request touches personnel files, send the mandatory 24-hour notice to the subject employee.
- Redaction Execution: Use software (Adobe Pro, etc.) to permanently remove PII. Do not just draw a black box over the text; that can be removed. “Burn” the redaction into the image.
- Production: Deliver the records within 3 business days. If denying any part, cite the specific statute.
Technical details and relevant updates
Technically, Arkansas FOIA is media-neutral. “Public records” includes writings, recorded sounds, films, tapes, electronic or computer-based information, or data compilations in any medium. This means metadata is also a public record. If you produce a Word document, the metadata showing who edited it and when is technically part of the record unless exempt. Most custodians convert to PDF to strip metadata and “flatten” redactions, ensuring security.
A relevant update concerns police recordings. Under Act 862 of 2019, body-worn camera and dashcam footage have specific exemptions. They are not public if they depict the death of a person, severe violence, or nudity, unless a family member consents or a court orders it. This creates a specialized redaction workflow for law enforcement that differs from standard paper records.
- Law Enforcement Exemption: “Undisclosed investigations” are exempt (§ 25-19-105(b)(6)). Once the investigation is closed, the file opens up, subject to PII redactions.
- Security Exemption: Records that would compromise the security of public buildings or schools (blueprints, emergency plans) are exempt (§ 25-19-105(b)(10)).
- Computer Security: Information that would make a computer system vulnerable to attack (passwords, network architecture) is exempt.
Statistics and scenario reads
FOIA litigation in Arkansas is frequent, reflecting the statute’s aggressive stance on transparency. Understanding the common friction points helps agencies allocate resources.
The majority of disputes do not arise from “secret government plots” but from mundane privacy clashes: neighbors wanting to know why a police car was at a house, or parents wanting to know why a teacher was fired.
45%
The most litigated area due to the “compelling public interest” standard.
30%
Denials based on “ongoing investigation” status.
25%
Disputes over emails, phone numbers, and addresses.
Monitorable points for custodians:
- Response Time: Average compliance is 2.5 days. Missing the 3-day window is a Class C misdemeanor.
- Data Leaks: Most common error is “failed redaction” (black box over text that is still searchable).
- Litigation Cost: Agencies pay plaintiff attorney fees if they lose, incentivizing settlement.
Practical examples of redaction scenarios
Scenario A: The “Active Investigation”
A journalist requests the police report for a robbery that happened yesterday. The police custodian denies the request entirely, citing the “undisclosed investigation” exemption (§ 25-19-105(b)(6)).
Outcome: This is a VALID denial. As long as the investigation is open and ongoing, the records are shielded. Once the case is closed or goes to court, the records become public, subject to redaction of victim/witness PII.
Scenario B: The Fired Teacher
A parent requests the disciplinary file of a teacher fired for misconduct. The school district releases the termination letter but redacts the witness statements and the teacher’s home address.
Outcome: This is CORRECT. The termination letter is public because there was a final resolution (firing) and a compelling public interest (teacher misconduct). The home address is exempt (§ 25-19-105(b)(13)). The witness statements might be redacted if they identify students (FERPA) or are deemed evaluation records of other employees.
Common mistakes in Arkansas FOIA responses
Withholding the whole file: The “segregability” rule is strict. You cannot withhold a 50-page document because one paragraph contains a trade secret. You must redact the paragraph and release the 49.9 pages.
Charging for labor: Trying to charge the requester for the 5 hours it took to find and redact the emails. Arkansas law only allows charging for the cost of the medium (paper/CD) and mailing.
Requiring a “Reason”: Asking the requester “Why do you want this?” or “Who are you?” You cannot require a name or a reason (except to check Arkansas residency for the citizenship requirement). Anonymous requests are valid.
Ignoring the 24-hour notice: Releasing a personnel file without notifying the subject employee. This exposes the agency to liability from the employee for privacy violation.
Improper Redaction Methods: Using a black marker on a screen and scanning it, or using “draw rectangle” in Word without removing the underlying text layer. Tech-savvy requesters can reverse this.
FAQ about Arkansas Public Records & Redactions
Can I request a list of all state employees’ home addresses?
No. Arkansas Code § 25-19-105(b)(13) specifically exempts the home addresses, personal email addresses, and personal telephone numbers of non-elected public employees.
This exemption is designed to protect public servants from harassment at their private residences. Elected officials, however, have fewer privacy protections in this regard.
Do I have to be an Arkansas resident to use FOIA?
Yes. The statute grants the right of inspection to “any citizen of the State of Arkansas.” While many agencies will honor out-of-state requests as a courtesy or to avoid hassle, they legally can deny them.
Agencies often ask for a driver’s license or proof of residency if they suspect the requester is an out-of-state data mining company.
Are emails between government employees public?
Generally, yes. If they transact public business, they are public records, regardless of whether they are sent on a government device or a personal device.
However, the content matters. If the email discusses a personnel evaluation or contains attorney-client privileged info, those specific parts must be redacted. The “purely personal” emails (e.g., “Lunch today?”) might be exempt as not constituting a “public record” of performance.
How quickly must they respond to my request?
If the record is “readily available,” it should be provided immediately. If it is in active use or storage, the custodian has up to three business days from the receipt of the request.
If the request is voluminous, the custodian should contact the requester to discuss a timeline, but they cannot unilaterally extend the 3-day deadline without the requester’s agreement.
What if the record contains my Social Security Number?
The custodian is legally obligated to redact it. Social Security numbers are exempt under federal law and state interpretations of privacy.
If an agency releases your SSN by mistake, they may be liable for privacy violations. You should notify them immediately to mitigate the breach.
Can they charge me for “search and retrieval” time?
No. Arkansas law does not allow charging for personnel time spent searching for files or redacting them. This is a cost of doing business for the government.
They can only charge for the actual cost of the copy (e.g., 5 cents per page, cost of a USB drive, postage). If you bring your own scanner, it is often free.
What constitutes a “public meeting” under FOIA?
A public meeting occurs when two or more members of a governing body meet to discuss official business on which they might foreseeably take action.
Notice of the meeting must be given to the media. While this is distinct from “records,” minutes and recordings of these meetings become public records immediately.
Are police body camera videos public?
It is complex. Generally yes, but they are exempt if they are part of an ongoing investigation. Once closed, they are public.
However, specific exemptions exist to protect the privacy of individuals inside their homes, victims of sex crimes, or depictions of death/severe injury. These portions must be redacted (blurred/muted).
Can I appeal a redaction?
Yes. You can file a lawsuit in the Circuit Court of the county where the agency is located or where you reside. The court must give the case precedence and hear it within 7 days.
If you win substantially, the court can order the agency to pay your reasonable attorney’s fees and litigation costs.
What is the “compelling public interest” test?
This applies to employee evaluation records. Even if an employee was fired, the records are only open if there is a “compelling public interest” in disclosure.
This means the public’s need to know (e.g., a teacher abusing students, a cop using excessive force) outweighs the employee’s privacy interest. It is a high standard.
References and next steps
- Arkansas Attorney General: Consult the “Arkansas Freedom of Information Handbook” (available online) for detailed commentary and opinion summaries.
- Electronic Redaction: Ensure your office uses software capable of “sanitizing” documents, not just masking text.
- Request Log: Maintain a detailed log of all FOIA requests, response dates, and exemptions cited to defend against “pattern of non-compliance” claims.
Related reading:
- Ark. Code Ann. § 25-19-105 (Exemptions list)
- McCambridge v. City of Little Rock (The constitutional privacy test)
- Stilley v. McBride (Personnel vs. Evaluation records)
- Attorney General Opinion No. 2017-024 (Guidance on video redaction)
Legal basis
The foundation of this system is the Arkansas Freedom of Information Act of 1967 (Ark. Code Ann. § 25-19-101 et seq.). Specifically, Section 25-19-105 (“Examination and copying of public records”) lists the statutory exemptions.
The Constitutional Right to Privacy interpretation comes from the landmark case McCambridge v. City of Little Rock, 298 Ark. 219 (1989), where the Arkansas Supreme Court adopted a balancing test between individual privacy and the public’s right to know, establishing that FOIA is not absolute when it infringes on fundamental privacy rights.
Final considerations
Navigating PII redactions in Arkansas requires a shift in mindset: transparency is the rule, privacy is the exception. Custodians must act as impartial gatekeepers, rigorously applying statutory exemptions without creating new ones out of convenience or embarrassment. For the citizen, the law provides powerful tools to force disclosure, but also safeguards to ensure their own sensitive data doesn’t become collateral damage in the quest for open government.
The “Arkansas standard” is high. Agencies that invest in training their FOIA officers and acquiring proper redaction technology will avoid the costly and embarrassing public courtroom battles that define the case law in this field. Precision, speed, and adherence to the specific definitions of “personnel” versus “evaluation” records are the keys to compliance.
Key point 1: Search fees are illegal; you can only charge for copies/media.
Key point 2: Notify employees immediately (within 24 hours) if their personnel file is requested.
Key point 3: Use the McCambridge test when the statute is silent but privacy is at risk.
- Always redact SSNs and financial account numbers.
- Do not release evaluation records without a final termination/suspension.
- Respond within 3 business days to avoid criminal liability.
This content is for informational purposes only and does not replace individualized legal analysis by a licensed attorney or qualified professional.