A FOIA request moves through four internal stages: intake and track assignment, a records search tasked out to the offices that actually hold the files, line-by-line exemption review, and sign-off before release. Simple requests can close in weeks. Complex ones routinely run months or years, and a requester can appeal any denial, redaction, or missed deadline.
Most guides stop at "here is how to write your request letter." What follows is the machinery on the other side of the inbox, with the numbers agencies themselves report.
What happens the moment a FOIA request is filed
The request lands in a FOIA office, not with the people who hold the records. A FOIA officer or analyst logs it, assigns a tracking number, and sends an acknowledgment letter. That letter is the first signal worth reading closely: it usually names the processing track, the assigned analyst, and the FOIA Public Liaison you can call later.
Next comes a perimeter decision. The FOIA officer reads the request and figures out which program offices, field offices, or components are likely to hold responsive records. A request for emails about a contract might touch a contracting office, a program office, and a general counsel’s files. Each of those becomes a separate search tasking.
The statutory clock starts once the request reaches the right office. Under the FOIA, agencies have 20 business days to make a determination, and the Department of the Interior OIG’s description of FOIA processing explains that requests are generally handled in the order received, with an extension of up to 10 additional business days available in unusual circumstances such as searching field locations or reviewing voluminous records.
One thing that surprises new requesters: a "determination" is not the same as delivery of documents. The agency satisfies the 20-day rule by telling you what it will release and on what grounds it is withholding anything. The actual pages can arrive in rolling productions long afterward.
Simple track vs. complex track: how agencies decide
Nearly every agency runs multitrack processing. Requests that need few pages, one office, and no outside consultation go in the simple track. Anything voluminous, spread across components, classified, or requiring consultation with another agency goes in the complex track. Expedited requests get their own queue.
The criteria vary by agency and are often expressed as a page or hour threshold in the agency’s FOIA regulations, but the practical drivers are consistent: estimated page count, number of offices tasked, whether another agency’s equities appear in the records, and whether a classification or privilege review is needed.
The part that trips people up is first-in, first-out ordering within each track. A narrow request does not jump ahead of a broad one in the same line. And a request placed in the complex track at a backlogged agency inherits that queue regardless of how reasonable it looks.
Here is what that difference looks like in reported data rather than in theory:
| Agency (fiscal year) | Simple track, average days | Complex track, average days | Notes |
|---|---|---|---|
| All reporting agencies, FY 2024 | 44 | Not reported as a single figure | Majority of complex requests closed in under 40 days |
| Department of State, main office, FY 2024 | 451.8 (median 433) | 775.6 (median 473) | Expedited track averaged 633.2 days |
| Department of Homeland Security, FY 2024 | About 5 | Varies by component | Processed roughly 60% of all federal requests |
| Department of Justice, FY 2024 then FY 2025 | 72.2, then 18.1 | Varies by component | Large swing after backlog reduction work |
The government-wide figure comes from DOJ’s Office of Information Policy summary of fiscal year 2024 annual reports, which put the simple-track average at 44 days, up from 39.4 days the year before. The State Department numbers come straight from its own FY 2024 annual FOIA report. The DOJ turnaround figure appears in the department’s 2026 Chief FOIA Officer Report.
Read that table as a warning about averages, not a ranking. The gap between 5 days and 451 days is mostly a difference in what kind of records each agency holds.
How expedited processing works, and who actually qualifies
Expedited processing moves a request to the front of a separate queue. The statute grants it on a showing of "compelling need," which has two statutory branches: a failure to get the records quickly could reasonably be expected to pose an imminent threat to someone’s life or physical safety, or a person primarily engaged in disseminating information has an urgency to inform the public about actual or alleged federal government activity.
Individual agencies add grounds by regulation. Social Security’s expedited processing rule covers imminent threat to life or safety and situations where the requester would be denied a legal right, benefit, or remedy without the records, and it requires a certified statement explaining the basis in detail. The same rule gives the agency 10 calendar days to grant or deny the expedite request and sends the decision to a single designated official.
Two practical points. First, expedited status is a decision about queue position, not a delivery promise; granted requests are processed "as soon as practicable," which at a backlogged component can still mean many months. The State Department’s expedited track averaged over 600 days in FY 2024. Second, a denial of expedited processing is itself appealable and is supposed to be handled quickly.
Generic urgency fails. "I need this for a project deadline" and "the public deserves to know" are not compelling needs. What works is a specific, dated, concrete harm tied to the records.
Inside the records search and exemption review
There is no central federal database of records to query. The FOIA office tasks the program offices and records custodians who own the files, and those people search their own shared drives, email archives, case management systems, and sometimes paper. The quality of the search depends on whether the taskings named the right offices and used the right search terms, which is why vague requests produce thin results.
Pulled records come back to the FOIA analyst for review. The analyst reads page by page against the nine statutory exemptions. DOJ’s plain-language list of the nine exemptions covers classified national security information (b)(1), internal personnel rules (b)(2), information another federal statute forbids releasing (b)(3), trade secrets and confidential commercial information (b)(4), privileged inter- and intra-agency communications including deliberative process and attorney work product (b)(5), personal privacy (b)(6), law enforcement records (b)(7), financial institution supervision records (b)(8), and well data (b)(9).
Redactions are not blanket. Each blacked-out block is coded with the specific exemption cited, so a release marked (b)(6) is a privacy call and one marked (b)(5) is a privilege call. That coding is what you argue against on appeal.
Two routing steps add time and are invisible from the outside. If the records originated with another agency, the FOIA office sends them out for consultation or refers the request outright, and the clock effectively pauses while another bureaucracy forms an opinion. If the records touch litigation, classification, or a sensitive program, agency counsel reviews before anything leaves the building.
Final release typically requires sign-off from a senior FOIA official, and sometimes from counsel or a classification authority. The structure is similar in spirit to how a federal agency reviews and decides a benefits claim: one office gathers evidence, another applies the legal standard, and a reviewer signs before anything becomes final.
Realistic timelines: statutory deadline vs. actual wait
The legal deadline and the operational reality are different animals. Twenty business days plus a 10-day extension is the statute. The FY 2024 government-wide simple-track average of 44 days is already more than double that, and complex requests at high-volume agencies run into years.
Treat government-wide averages skeptically. FOIA Advisor’s review of the FY 2024 data points out that DOJ computes these averages by taking a plain mean across agencies rather than weighting by how many requests each agency processed, which distorts the picture when one agency such as DHS handles the majority of all requests. The honest answer to "how long will mine take" is found in the specific agency’s annual report, not the national average.
Better predictors than the statute:
- Which component holds the records, not which department
- Whether your request will likely need consultation with another agency
- The agency’s reported backlog and its oldest pending request
- How many pages your request realistically sweeps in
Agencies must provide tracking for requests expected to take more than 10 days, and most give a status lookup through FOIA.gov or their own portal. The status page typically shows the received date, track assignment, and an estimated completion date that shifts over time.
What happens after a denial: appeal and OGIS mediation
An administrative appeal goes to a different office from the one that processed the request, usually an appeals staff or general counsel’s office. Under the FOIA Improvement Act of 2016, agencies must allow at least 90 days to file; the exact window and address appear in the denial letter.
An appeal can challenge three distinct things, and saying which one you mean matters:
- The exemptions claimed, including whether the agency segregated and released non-exempt portions
- The adequacy of the search, including which offices were tasked and what terms were used
- Fee category, fee amount, or denial of a fee waiver
Appeals are not fast either. The DOJ summary cited above put the FY 2024 government-wide average for adjudicating appeals at 96.91 days, with the highest-volume agencies ranging from 12 days at DHS to 173 days at the Department of Defense.
Mediation is the quieter option. The Office of Government Information Services mediation FAQ describes OGIS as the federal FOIA ombudsman, a neutral that works with both requesters and agencies. Its services are free and voluntary, and the office states plainly that it is a non-binding, non-exclusive alternative to litigation with no enforcement authority. OGIS can unstick a stalled request or clarify a confusing response; it cannot order an agency to release anything.
If the agency blows the statutory deadline, the requester is generally treated as having exhausted administrative remedies and may go to federal district court without waiting for an appeal decision. FOIA suits are filed in U.S. district court, which is a far more formal proceeding than filing suit in a lower court without a lawyer and is where most requesters consult counsel.
Federal FOIA vs. state public records laws: what’s different
Federal FOIA reaches executive branch agencies only. As DOJ’s overview of the FOIA states, it does not provide access to records held by Congress, the federal courts, advisory offices of the President, state or local agencies, or private businesses, and every state has its own statute governing access to state and local records.
That matters for the records people most often want. Police reports, body camera footage, school board emails, city contracts, county property enforcement files, and state university records are all state-law territory. Filing a federal FOIA request for them produces a polite rejection and wasted months.
State clocks are usually shorter on paper, but shorter is not the same as faster or stronger. A state-by-state comparison of public records laws notes that California’s 10-day clock is a deadline to decide whether disclosable records exist rather than to produce them, that the widely repeated Texas 10-business-day figure is the deadline to ask the attorney general for a withholding ruling, and that New York’s five business days can be satisfied with an acknowledgment and an estimated date. Several states set no day count at all and rely on a promptness standard.
The appeal path differs too. Some states route disputes to the attorney general, some to a dedicated open records commission or ombudsman, and some straight to state court. None of them use the federal appeal process, and OGIS has no role in state disputes.
FAQ
Can a requester sue the moment an agency misses the 20-day deadline? Missing the deadline generally allows a requester to treat the failure as exhaustion of administrative remedies and go to court. In practice, if the agency issues a determination before suit is filed, the usual expectation of an administrative appeal returns, so timing matters.
Are there fees? Fees depend on the requester category. The statute’s fee provision gives commercial requesters the broadest exposure, charges educational, noncommercial scientific, and news media requesters duplication costs only, and provides other requesters a free allowance of the first two hours of search time and the first 100 pages of duplication. Many agencies waive small balances and most requests end up free.
Can an agency charge when it finds nothing? Search time is billable work regardless of outcome, so agencies generally may charge for a search that turns up no responsive records or produces only withheld pages. This is the reason a narrow, well-targeted request costs less than a broad one.
Does filing reveal the requester’s identity? Many agencies publish FOIA logs listing processed requests, and the request letter itself is an agency record. Anonymity is not part of the process, though agencies vary in how much identifying detail they post.
If the goal is speed rather than completeness, the most effective lever is scope. A request naming one office, one date range, and one document type lands in the simple track and moves with it. A request phrased as "all records relating to" lands in the complex track at the back of a line measured in years, and no amount of follow-up correspondence changes which line it is standing in.