4.3 Sunshine Laws, Public Records Requests (FOIA), & Privacy Act Governance

Sunshine Laws, Public Records Requests (FOIA), & Privacy Act Governance

Quick Answer: Public sector human resources operates at the intersection of public transparency and individual constitutional privacy. Public HR leaders must navigate open records laws (the federal Freedom of Information Act [FOIA, 5 U.S.C. § 552] and state Public Records Acts), enforce strict Open Meetings / Sunshine Law rules regarding Closed/Executive Sessions, manage federal Privacy Act of 1974 (5 U.S.C. § 552a) System of Records Notices (SORN), and ensure compliance with electronic discovery mandates covering public communications on personal devices (City of San Jose v. Superior Court).

In democratic governance, citizens maintain a fundamental statutory right to inspect the records and deliberations of public agencies. However, this transparency mandate must be carefully balanced against statutory privacy protections shielding sensitive employee personnel, medical, and disciplinary records.

---

The Legal Framework of Public Records (FOIA & State Acts)

The Freedom of Information Act (FOIA, 5 U.S.C. § 552) and state open records statutes (e.g., California Public Records Act, Texas Public Information Act, Florida Sunshine Law) establish a universal legal presumption: $\text{All Government Records are Presumptively Open to Public Inspection}$

To withhold or redact any document, the public agency bears the full legal burden of proving that the requested record falls squarely within a specific, narrowly construed statutory exemption.

┌─────────────────────────────────────────────────────────────────────────┐
│                     PUBLIC vs. EXEMPT HR RECORDS MATRIX                 │
├────────────────────────────────────┬────────────────────────────────────┤
│ Presumptively PUBLIC Records       │ Presumptively EXEMPT / PROTECTED   │
├────────────────────────────────────┼────────────────────────────────────┤
│ • Employee names & official titles │ • Social Security Numbers (SSNs)   │
│ • Base salaries, overtime, & total │ • Home addresses, phone numbers,   │
│   annual gross compensation        │   & personal email addresses       │
│ • Official job classification specs│ • Medical files, FMLA/ADA records, │
│ • Dates of public employment       │   & workers' compensation forms    │
│ • Formal, sustained final adverse  │ • EAP / psychological evaluations  │
│   disciplinary action orders       │ • Unsubstantiated / raw complaints │
│ • Public agency settlement payout  │ • Active, unadjudicated internal   │
│   amounts and severance agreements │   affairs/misconduct files         │
│ • Public-business emails & texts   │ • Promotional exam test questions  │
│   (even on personal devices)       │   and scoring answer keys          │
└────────────────────────────────────┴────────────────────────────────────┘

Critical FOIA Exemptions in HR Governance

1. FOIA Exemption 6 (5 U.S.C. § 552(b)(6)): Protects "personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy."
   • The Balancing Test: Established by the Supreme Court in Department of the Air Force v. Rose (1976), HR must weigh the individual employee's reasonable expectation of personal privacy against the public's legitimate interest in understanding how the agency performs its statutory duties.
2. FOIA Exemption 7(C) (5 U.S.C. § 552(b)(7)(C)): Protects law enforcement records when disclosure could reasonably be expected to constitute an unwarranted invasion of personal privacy (DOJ v. Reporters Committee for Freedom of the Press, 1989).

[!IMPORTANT] Salary Transparency Mandate: Public sector compensation is universally public. Courts consistently hold that public employees have no legitimate expectation of privacy regarding their salaries, overtime disbursements, or public pensions because taxpayers fund these expenditures.

---

Open Meetings Acts & Closed / Executive Session Governance

Open Meetings Acts (often called Sunshine Laws, such as California's Ralph M. Brown Act or Florida's Government-in-the-Sunshine Law) mandate that all multi-member governing bodies (City Councils, School Boards, Civil Service Commissions) must conduct their deliberations and take formal actions in open, publicly noticed meetings.

┌─────────────────────────────────────────────────────────────────────────┐
│              EXECUTIVE / CLOSED SESSION STATUTORY CRITERIA              │
├──────────────────────────┬──────────────────────────────────────────────┤
│ Permissible Topic        │ Legal Scope & Operational Limitations        │
├──────────────────────────┼──────────────────────────────────────────────┤
│ 1. Personnel Exception   │ Limited strictly to considering appointment, │
│    (Individual Officer)  │ employment, evaluation, discipline, or       │
│                          │ dismissal of a SPECIFIC individual employee. │
├──────────────────────────┼──────────────────────────────────────────────┤
│ 2. Labor Negotiations /  │ Authority to meet with designated labor      │
│    Collective Bargaining │ negotiators to discuss wage/benefit limits   │
│                          │ and collective bargaining strategy.          │
├──────────────────────────┼──────────────────────────────────────────────┤
│ 3. Pending / Threatened  │ Conferring with legal counsel regarding      │
│    Litigation            │ formal litigation or significant exposure    │
│                          │ to litigation against the agency.            │
└──────────────────────────┴──────────────────────────────────────────────┘

The "Personnel Exception" Guardrails

The personnel exception to open meetings is narrowly tailored:

• Individual Specificity: It applies only to specific individual personnel matters (e.g., evaluating the City Manager's annual performance or hearing formal termination charges against a specific police officer).
• Strict Ban on Policy / Budget Discussions: A governing board cannot enter executive session to discuss general workforce policies, broad departmental reorganizations, agency-wide layoff plans, or overall budget reductions. General policy matters must be debated in open public session.
• The 24-Hour Personnel Notice Rule: Under statutes like California Government Code § 54957, if an agency intends to hear specific disciplinary charges or complaints against an employee in closed session, the employee must be provided written notice at least 24 hours in advance and afforded the statutory right to demand that the hearing be held in open public session.

---

The Privacy Act of 1974 & System of Records Notices (SORN)

While FOIA promotes public disclosure, the Privacy Act of 1974 (5 U.S.C. § 552a) regulates how federal agencies collect, maintain, use, and disseminate personally identifiable information (PII) about individuals.

1. System of Records Notice (SORN) Mandate

An agency cannot maintain secret record systems. Any collection of records under agency control from which information is retrieved by an individual's name or personal identifier (e.g., an electronic HRIS database or applicant tracking system) must have an official SORN published in the Federal Register detailing:

• The statutory authority for maintaining the system.
• The categories of individuals and records covered.
• The routine uses and authorized external disclosures.
• Safeguards and technical retention/disposal schedules.

2. Statutory Employee Rights Under the Privacy Act

• Right of Access: Public employees maintain the statutory right to inspect and copy their own Official Personnel Folder (OPF) and HRIS records.
• Right of Amendment: An employee may request formal correction or amendment of any factual record they believe is inaccurate, irrelevant, untimely, or incomplete.
• Accounting of Disclosures: Agencies must track and document all disclosures of an employee's records to third parties (except disclosures under FOIA or internal need-to-know).

---

Electronic Records on Personal Devices: The City of San Jose Doctrine

In modern public administration, official communications frequently occur across personal smartphones, text messages, private email accounts, and messaging apps.

                       COMMUNICATION INITIATED
                                 │
          Does the communication relate to public business?
     (e.g., agency operations, union bargaining, contracts, staffing)
                                 │
                ┌────────────────┴────────────────┐
               YES                                NO
                │                                 │
         PUBLIC RECORD                      PURELY PRIVATE
                │                                 │
   Subject to Public Records Act             Exempt from
   & Mandatory Disclosure                      Disclosure
  (Regardless of device used!)

The Landmark Holding (City of San Jose v. Superior Court, 2 Cal.5th 608 [2017])

The Supreme Court of California—establishing a precedent adopted across nationwide jurisdictions—held that communications on private personal accounts or personal devices concerning public business are public records subject to disclosure under open records acts.

• Content Governs Over Location: Whether a record is public depends on the substantive content and context of the communication, not the ownership of the device or server hosting it.
• HR Policy Implementation: Public HR executives must enact comprehensive digital records governance policies:
  1. Prohibiting the use of private personal text/email accounts for public agency business.
  2. Establishing clear affidavit protocols requiring employees to conduct good-faith searches of personal devices when a targeted public records request or litigation hold is issued.
  3. Enforcing statutory records retention schedules under State Archival and Sunshine guidelines to prevent spoliation of public records.