18.1 Public Records, FOIA & Recording Retention Schedules

18.1 Public Records, FOIA & Recording Retention Schedules

Quick Answer: In public safety communications governance, 9-1-1 voice recordings, Computer-Aided Dispatch (CAD) incident logs, Land Mobile Radio (LMR) traffic, Mobile Data Computer (MDC) text messages, and NG9-1-1 multimedia are classified as public records under state open records acts (Sunshine Laws). These materials are subject to a statutory presumption of open inspection unless protected by narrow exemptions—such as active criminal investigations, juvenile privacy, sexual assault victim protections, or state-specific 9-1-1 caller privacy statutes. Crucially, standalone PSAPs and law enforcement dispatch centers are NOT Covered Entities under HIPAA (45 CFR § 160.103); citing HIPAA to deny public records requests for 9-1-1 recordings is a major administrative error. Campus dispatchers must distinguish between unshielded law enforcement unit records and FERPA-protected student records. In criminal proceedings, dispatch agencies must comply with Brady v. Maryland (material exculpatory evidence) and Giglio v. United States (witness impeachment). Routine audio retention is set mainly by state records retention schedules (commonly months to several years), with immediate litigation holds enforced for catastrophic incidents to prevent spoliation sanctions under Federal Rule of Civil Procedure 37(e).

---

1. Statutory Foundations: Federal FOIA vs. State Open Records Acts

Public safety answering points (PSAPs) and emergency communications centers (ECCs) create, process, and store immense volumes of electronic, telephonic, and radio data around the clock. Understanding the jurisdictional architecture governing public access to these materials is a core competency for Emergency Number Professionals.

                      PUBLIC RECORDS JURISDICTIONAL SPLIT
┌─────────────────────────────────────────────────────────────────────────────┐
│                            FEDERAL FOIA (5 U.S.C. § 552)                    │
│ • Applies EXCLUSIVELY to federal executive branch agencies (FBI, DEA, USCG) │
│ • Does NOT apply to municipal, county, regional, or state 9-1-1 centers     │
└──────────────────────────────────────┬──────────────────────────────────────┘
                                       │
                                       ▼
┌─────────────────────────────────────────────────────────────────────────────┐
│                 STATE OPEN RECORDS ACTS ("SUNSHINE LAWS")                   │
│ • Govern local government, municipalities, counties, and regional 9-1-1     │
│ • Examples: Texas Public Information Act, Florida Sunshine Law (Ch. 119),    │
│   California Public Records Act (CPRA), Illinois Freedom of Information Act │
│ • Statutory baseline: Presumption of open inspection and disclosure        │
└─────────────────────────────────────────────────────────────────────────────┘

The Presumption of Openness

Every state has enacted comprehensive public records legislation designed to ensure governmental accountability and transparency. While these statutes share common philosophical roots with the federal Freedom of Information Act (FOIA; 5 U.S.C. § 552), federal FOIA applies strictly to federal executive branch agencies. State, county, and municipal 9-1-1 authorities are governed exclusively by their respective state open records acts (frequently known as Sunshine Laws).

Under state sunshine laws, the foundational legal principle is the presumption of open access: all records created, received, or maintained by a public agency in connection with the transaction of public business are presumed open for public inspection and duplication. An emergency communications center seeking to withhold or redact a 9-1-1 record carries the affirmative legal burden of demonstrating that the record falls squarely within a specific, narrowly construed statutory exemption.

---

2. Definition & Classification of 9-1-1 Public Records

Every operational medium deployed in modern public safety communications falls within the statutory definition of a public record.

┌─────────────────────────────────────────────────────────────────────────────┐
│                     PSAP PUBLIC RECORD CLASSIFICATION                       │
├──────────────────────────┬──────────────────────────┬───────────────────────┤
│     TELEPHONY & AUDIO    │     CAD & TELEMETRY      │    NEXT GENERATION    │
├──────────────────────────┼──────────────────────────┼───────────────────────┤
│ • Inbound 9-1-1 voice    │ • CAD incident master log│ • Text-to-911 chats   │
│ • Admin 10-digit lines   │ • Unit activity history  │ • Real-Time Text (RTT)│
│ • Outbound callbacks     │ • Telecommunicator notes │ • Uploaded photos     │
│ • Secondary transfer aud │ • Timestamp audit trails │ • Citizen video feeds │
│ • LMR radio transmissions│ • MDC inter-unit texts   │ • Automated crash data│
│ • Language line bridges  │ • ANI/ALI query results  │ • Telematics packets  │
└──────────────────────────┴──────────────────────────┴───────────────────────┘

Audio Recordings and Voice Logs

Digital master recordings of incoming 9-1-1 emergency calls, administrative ten-digit lines, and two-way Land Mobile Radio (LMR) or push-to-talk over cellular (PTToC) transmissions constitute public records. Because audio recordings capture human inflection, background background sounds, and raw emotional distress, they are frequently sought by broadcast journalists, print reporters, and civil litigants.

Computer-Aided Dispatch (CAD) Event Logs

The CAD incident history document represents an evidentiary ledger reflecting every keystroke, system prompt, and automated trigger during an event:

• Call Intake Timestamps: Precise seconds of call arrival, queue wait time, ring duration, call seizure, and call disconnect.
• Dispatch Processing Intervals: Time of incident creation, dispatch queue placement, unit recommendation, unit assignment, unit dispatch acknowledgement, en route time, arrival on scene, and incident clear time.
• Telecommunicator Operational Narrative: Real-time notes entered by call-takers and radio dispatchers documenting caller descriptions, weapons observed, suspect updates, and field responder requests.
• Internal Audit Trails: System metadata tracking the individual user ID of the telecommunicator entering specific notes, record modification histories, and terminal geolocations.

Mobile Data Computer (MDC) Text Communications

Mobile Data Computers (MDCs) and Mobile Data Terminals (MDTs) mounted in emergency vehicles allow two-way digital messaging between dispatchers and field units, as well as peer-to-peer messaging between officers. Field personnel frequently mistake MDC text messages for private chats. In reality, MDC communications are public records subject to public records requests and judicial discovery. Derogatory comments, unprofessional banter, or tactical critiques transmitted over MDCs must be preserved and disclosed under applicable state open records laws.

Next Generation 9-1-1 (NG9-1-1) Multimedia

Under NG9-1-1 architectures governed by NENA i3 standards, emergency communications incorporate rich digital media. Real-Time Text (RTT), SMS text-to-911 transcripts, digital photographs sent by callers, streaming citizen video feeds, and telematics crash notification files (Advanced Automatic Collision Notification - AACN) are digital public records subject to identical retention and disclosure mandates.

---

3. Statutory Exemptions & Mandatory Redaction Mandates

While 9-1-1 records are presumed public, public safety agencies have an affirmative legal obligation to redact or withhold information protected by explicit statutory exemptions. Releasing unredacted confidential data exposes the agency to civil liability and violates state privacy mandates.

Active Criminal Investigation Exemption (Investigatory Privilege)

Under most state open records acts, records compiled by or for law enforcement agencies for the purpose of investigating or prosecuting criminal activity are exempt from disclosure while the investigation remains active and pending.

• Application to PSAPs: When a 9-1-1 call or CAD log contains details of an ongoing homicide investigation, bank robbery, or hostage situation, premature release could alert co-conspirators, reveal tactical response strategies, compromise undercover personnel, or contaminate witness memory.
• Operational Requirement: The PSAP records custodian must coordinate directly with the lead detective or prosecuting attorney prior to release. Once the criminal investigation is formally closed or resolved via adjudication or dismissal, this exemption generally expires.

9-1-1 Caller Identity & Location Privacy Statutes

A growing number of states have enacted specific statutory exemptions recognizing that citizens dial 9-1-1 in moments of extreme vulnerability. Some states protect the audio recording itself, treating 9-1-1 audio as confidential while allowing release of transcripts or CAD summaries. Other states protect the telephone number, billing address, and identity of the 9-1-1 caller while releasing the audio with the caller's voice or identifying statements redacted.

Redaction Mechanics & Tools

When an exemption applies to a portion of a public record, the agency cannot simply withhold the entire record if redaction is feasible. The agency must provide the redacted record accompanied by a statutory explanation:

• Audio Redaction: Utilizing specialized digital forensic redaction software to bleep, mute, or tone out exempt audio segments (e.g., caller shouting their Social Security number, medical history, or juvenile names) without altering or deleting the original evidentiary master file.
• Text / CAD Redaction: Electronically blacking out exempt text lines in CAD reports while citing the specific statutory code section justifying each redaction in a formal response letter.

---

4. HIPAA Applicability in Emergency Communications Centers

A persistent and dangerous point of operational confusion in public safety administration is the relationship between the Health Insurance Portability and Accountability Act of 1996 (HIPAA; 45 CFR Parts 160 and 164) and 9-1-1 communications.

                    HIPAA APPLICABILITY IN PUBLIC SAFETY
┌─────────────────────────────────────────────────────────────────────────────┐
│                      DOES HIPAA APPLY TO YOUR PSAP?                         │
└──────────────────────────────────────┬──────────────────────────────────────┘
                                       │
         ┌─────────────────────────────┴─────────────────────────────┐
         ▼                                                           ▼
STANDALONE / POLICE PSAP                                    HYBRID PUBLIC ENTITY
• Primary 9-1-1 center                                      • Single municipal entity that
• Fire / Police dispatch                                      operates EMS that bills
• Does NOT bill for healthcare                                • Segregates covered functions
         │                                                           │
         ▼                                                           ▼
NOT A COVERED ENTITY                                        DUAL CLASSIFICATION
• HIPAA DOES NOT APPLY                                      • Dispatch: Non-Covered (Public)
• 9-1-1 calls are NOT PHI                                   • EMS Billing: Covered (HIPAA PHI)
• Governed by State Open Records                            • Field Paramedic ePCR is PHI

Defining Covered Entities (45 CFR § 160.103)

HIPAA's Privacy and Security Rules apply strictly to Covered Entities and their Business Associates. A Covered Entity is statutorily defined as:

1. A health plan (health insurance companies, HMOs, Medicare);
2. A healthcare clearinghouse; or
3. A healthcare provider who transmits health information in electronic form in connection with standard transactions (specifically, electronic billing and claims processing).

Why Standalone PSAPs Are NOT Covered by HIPAA

A standalone municipal or county 9-1-1 communications center, emergency communications district, or law enforcement dispatch agency does not provide healthcare services and does not engage in electronic billing for medical treatment. Therefore, a standalone PSAP is not a Covered Entity under HIPAA.

Information provided by a caller describing a medical emergency (e.g., "my father is unconscious and having a heart attack") is an emergency dispatch transaction, not Protected Health Information (PHI) held by a healthcare provider. Citing HIPAA to deny a public records request for 9-1-1 audio is legally incorrect and will result in judicial penalties for improper withholding under state open records laws.

Hybrid Entities & Consolidated Fire/EMS PSAPs

Under 45 CFR § 164.105, a public agency (such as a municipality or consolidated county government) whose operations include both covered and non-covered functions may formally designate itself as a Hybrid Entity:

• The Covered Component: The municipal ambulance service or fire-based EMS transport division that bills third-party payers for emergency medical care. The Electronic Patient Care Report (ePCR) and clinical treatment records generated by field paramedics are covered PHI.
• The Non-Covered Component: The 9-1-1 communications center intake console, CAD logs, and dispatch audio. These remain public safety records subject to state open records laws.
• The Operational Firewall: When paramedics relay medical diagnoses, patient vitals, or clinical treatment updates back to dispatch via radio or mobile data computers (MDCs), that information must be segregated so it does not contaminate non-covered dispatch records released to the public.

45 CFR § 164.512 Public Safety Exceptions

Even when a public safety entity handles PHI, federal law under 45 CFR § 164.512 explicitly authorizes disclosures without individual patient authorization under key public safety exceptions:

• Emergency Treatment & Dispatch: Disclosing health information necessary to coordinate emergency medical treatment and transport.
• Law Enforcement Inquiries: Responding to law enforcement requests to locate or identify suspects, fugitives, material witnesses, or missing persons.
• Averting Serious Threats: Disclosing information when necessary to prevent or lessen a serious, imminent threat to the health or safety of a person or the public.

---

5. Campus Dispatch: FERPA vs. Law Enforcement Records

Emergency communications centers serving state and private universities operate under unique legal dualities involving the Family Educational Rights and Privacy Act of 1974 (FERPA; 20 U.S.C. § 1232g).

┌─────────────────────────────────────────────────────────────────────────────┐
│                     FERPA VS. CAMPUS LAW ENFORCEMENT RECORDS                │
├──────────────────────────┬──────────────────────────────────────────────────┤
│ EDUCATION RECORDS        │ • Transcripts, grades, disciplinary hearing files│
│ (PROTECTED BY FERPA)     │ • Protected from unauthorized public disclosure  │
│                          │ • 34 CFR Part 99 governs confidentiality         │
├──────────────────────────┼──────────────────────────────────────────────────┤
│ LAW ENFORCEMENT RECORDS  │ • Campus 9-1-1 audio, CAD logs, arrest ledgers   │
│ (EXCLUDED FROM FERPA)    │ • Created by campus police for police purposes   │
│                          │ • 34 CFR § 99.8 explicitly excludes from FERPA   │
│                          │ • Subject to state open records inspection       │
└──────────────────────────┴──────────────────────────────────────────────────┘

The Law Enforcement Unit Record Exemption (34 CFR § 99.8)

Under federal regulations implementing FERPA (34 CFR § 99.8), records created and maintained by a campus law enforcement unit for the purpose of law enforcement are explicitly excluded from the definition of education records.

This means that when a campus police department or university public safety dispatch center generates 9-1-1 audio recordings, CAD incident reports, or officer dispatch logs regarding crimes on campus (even when involving enrolled students), those records cannot be withheld under FERPA. They are public safety records governed by state open records laws and the Clery Act (20 U.S.C. § 1092(f)), which mandates transparency regarding campus crime logs.

---

6. Retention Schedules, NFPA Standards & Litigation Holds

Public safety agencies must balance the storage costs of vast digital recordings against legal retention mandates and civil liability defense requirements.

                     RECORDING RETENTION ARCHITECTURE
┌─────────────────────────────────────────────────────────────────────────────┐
│                     ROUTINE OPERATIONAL COMMUNICATIONS                      │
│ • Agency policy & state schedule set the minimum                           │
│ • State Archival Schedules: Commonly 180 Days to 3 Years                   │
│ • Voice audio, administrative phone lines, tactical talkgroups, CAD events   │
└──────────────────────────────────────┬──────────────────────────────────────┘
                                       │
                                       ▼
┌─────────────────────────────────────────────────────────────────────────────┐
│                   HIGH-SEVERITY & PERMANENT RETENTION                       │
│ • Homicides, Officer-Involved Shootings (OIS), In-Custody Deaths            │
│ • Fatal motor vehicle collisions, active tort claims, capital offenses     │
│ • Retain permanently or until all appeals and statutes of limitations expire│
└─────────────────────────────────────────────────────────────────────────────┘

NFPA Standards & State Archival Schedules

• Standards Guidance: Communications center standards and accreditation programs expect recordings to be retained and retrievable, but the legally binding retention period comes from state records law and the agency's approved schedule.
• State Retention Schedules: Most state records management divisions mandate longer minimum retention schedules—typically 180 days to 3 years for routine dispatch audio and CAD events.

Litigation Holds & Preventing Evidence Spoliation

When a catastrophic incident occurs (e.g., an officer-involved shooting, an in-custody death, or an emergency response delayed by dispatch error), the agency has an immediate legal duty to preserve evidence.

• The Legal Trigger: The duty to preserve evidence attaches as soon as the agency reasonably anticipates litigation (e.g., receipt of a Notice of Claim, attorney representation letter, or internal affairs fatality inquiry), not merely when a formal lawsuit is served.
• Litigation Hold Directive: PSAP management must immediately issue a formal written litigation hold to IT and records administrators, directing them to suspend automated purge cycles on designated CAD incidents and audio recording tracks.
• Forensic Hash Preservation: Master audio WAV files and raw CAD database extracts must be secured with cryptographic hash values (SHA-256) to verify that the digital files were never altered, spliced, or corrupted.
• Spoliation Sanctions (FRCP 37(e)): If an agency allows its logging recorder to overwrite 9-1-1 audio after learning of potential litigation, courts may impose devastating sanctions under Federal Rule of Civil Procedure 37(e), including adverse inference jury instructions (ordering the jury to presume the destroyed recording proved dispatcher negligence) or striking the agency's immunity defenses.

---

7. Subpoena Duces Tecum vs. Administrative FOIA Fulfillment

An Emergency Number Professional must clearly differentiate between an administrative public records request and a judicial court order.

┌─────────────────────────────────────────────────────────────────────────────┐
│                     FOIA REQUEST VS. SUBPOENA DUCES TECUM                   │
├──────────────────────────┬──────────────────────────────────────────────────┤
│ ADMINISTRATIVE FOIA      │ • Submitted by any citizen, journalist, or party │
│                          │ • Governed by State Sunshine / Open Records Acts │
│                          │ • Subject to mandatory statutory redactions      │
│                          │ • Statutory response deadlines (3-10 days)       │
├──────────────────────────┼──────────────────────────────────────────────────┤
│ SUBPOENA DUCES TECUM     │ • Issued by court clerk, judge, or grand jury    │
│                          │ • Compels production of physical/digital evidence│
│                          │ • Requires UNREDACTED master audio and CAD data  │
│                          │ • Demands formal Affidavit of Custodian of Record│
│                          │ • Failure to comply: Contempt of Court / arrest  │
└──────────────────────────┴──────────────────────────────────────────────────┘

Authenticating Evidence: Custodian of Records Affidavit

When complying with a subpoena duces tecum, the records custodian must attach a sworn, notarized Certificate of Authenticity (Custodian of Records Affidavit) under Federal Rule of Evidence 902(11) or state equivalents. This certifies that:

1. The digital records were made at or near the time of the occurrence by a person with knowledge or by an automated system;
2. The records were kept in the course of regularly conducted public safety activity; and
3. Creating the record was a regular operational practice of the agency.

This legal certificate qualifies the digital files as self-authenticating business records, allowing them to be entered into evidence without requiring the personal courtroom testimony of the telecommunicator.

Criminal Justice Disclosures: Brady, Giglio & Marsy's Law

• Brady v. Maryland (373 U.S. 83): The prosecution team (which legally encompasses police and 9-1-1 dispatch) must disclose all material exculpatory evidence to criminal defendants. If a 9-1-1 caller described a suspect whose physical characteristics contradict the defendant, that recording must be disclosed.
• Giglio v. United States (405 U.S. 150): Extends Brady to require disclosure of impeachment material regarding prosecution witnesses. If a telecommunicator is slated to testify regarding dispatch timing, any sustained internal affairs findings for dishonesty or falsification of CAD logs must be turned over to the defense.
• Marsy's Law: State constitutional amendments establishing a Crime Victims' Bill of Rights, restricting disclosure of crime victim contact information, home addresses, and traumatic 9-1-1 dispatch recordings to shield victims from harassment.

---

8. ENP Exam Watch

• FOIA Applicability: Federal FOIA applies only to federal executive agencies. Local and state PSAPs are governed strictly by state sunshine/open records acts.
• HIPAA in Standalone PSAPs: Standalone 9-1-1 centers are not Covered Entities under 45 CFR § 160.103. Denying open records requests for 9-1-1 audio based on HIPAA is legally invalid.
• Hybrid Entities: Municipalities operating both billing EMS and dispatch must maintain strict operational firewalls between covered ePCR billing data and public CAD dispatch logs.
• FERPA Exemption: Campus law enforcement unit records (9-1-1 audio, CAD logs, arrest records) are explicitly excluded from FERPA under 34 CFR § 99.8 and remain public records.
• Retention Baselines: State retention schedules set routine retention periods; serious incidents and anticipated litigation require holds that suspend purging to avoid spoliation sanctions (in federal cases, FRCP 37(e)).