2.3 Confidential Information and Records Retention
Key Takeaways
A supplier’s blanket confidentiality marking neither proves an exemption nor forfeits every legitimate protection.
Federal FOIA Exemption 4 and the UTSA trade-secret definition have different scope and do not automatically govern municipal records.
Apply the actual records schedule, federal-award trigger where applicable, and any litigation, audit, protest, or investigation hold.
Protecting Trade Secrets & Proprietary Commercial Information
While public records laws favor disclosure, public buyers must balance public transparency against the protection of legitimate vendor intellectual property. Disclosing genuine trade secrets harms fair competition and discourages innovative firms from bidding on government contracts.
Statutory Definition of Trade Secrets
Under the Uniform Trade Secrets Act (UTSA), a trade secret is information (such as formulas, patterns, compilations, technical designs, processes, or commercial financial data) that:
- Derives independent economic value, actual or potential, from not being generally known to, and not being readily ascertainable by proper means by, other persons who can obtain economic value from its disclosure; and
- Is the subject of efforts that are reasonable under the circumstances to maintain its secrecy.
The Ineffectiveness of Blanket Confidentiality Stamps
A common challenge in public procurement occurs when a vendor stamps "CONFIDENTIAL AND PROPRIETARY" across every single page of its 300-page proposal, including its cover letter, table of contents, standard employee resumes, and total pricing schedule.
A vendor's blanket marking does not establish a legal exemption. The solicitation should explain the applicable designation procedure, for example:
- Blanket markings do not relieve the agency of making a lawful disclosure determination;
- Only specific, segregable pages containing bona fide trade secrets or proprietary financial data may be marked;
- A separate confidential volume and a proposed redacted copy may assist review if required by the solicitation; and
- The vendor must provide specific legal and factual citations demonstrating how each marked item satisfies the statutory definition of a trade secret.
Handling a request for vendor information
- Log the request and calculate the deadlines under the applicable statute.
- Preserve the complete records and identify the requested material, including email and evaluator notes.
- Review possible exemptions with the records officer and counsel. Federal FOIA Exemption 4 covers trade secrets and qualifying confidential commercial or financial information; it is not identical to the UTSA trade-secret definition and does not itself govern municipal records.
- Notify the supplier if the applicable procedure requires or permits it. Request specific support for claimed exemptions. Do not invent a universal five-day supplier-response period or let a supplier veto disclosure.
- Make the authorized determination, release segregable nonexempt information, and record the basis for redactions and available review rights.
Unit prices, labor rates, security diagrams, personal data, and financial statements require analysis under the actual law. None is universally public or universally confidential merely because of its label.
Records Retention Schedules & Statutory Audit Trails
Public procurement operates under strict accountability requirements. Every procurement action—from initial requisition through contract closeout—must be documented to establish a complete, defensible statutory audit trail.
The Official Procurement Docket
The central purchasing office must maintain an official contract file (the procurement docket) for every solicitation. This docket must contain:
- The approved purchase requisition and independent government cost estimate;
- The published solicitation package, including all specifications, terms, and conditions;
- Proof of public notice and advertising affidavits;
- All issued written addenda with vendor acknowledgment receipts;
- The official list of plan holders and pre-bid conference sign-in sheets and minutes;
- All received bids or proposals, including time-stamped electronic submission logs;
- Bid bonds and letters of credit;
- Formal written determinations (e.g., sole-source justifications, emergency findings, responsiveness determinations, responsibility reviews);
- Individual evaluator scorecards and signed consensus evaluation summaries;
- Written debriefing notes and the official Notice of Intent to Award;
- The fully executed contract, performance and payment bonds, and certificates of insurance;
- All contract modifications, change orders, and written price adjustments;
- Invoices, receiving inspection reports, and payment vouchers; and
- Any filed bid protests, legal correspondence, administrative rulings, and settlement agreements.
Retention schedules and holds
Apply the jurisdiction's approved records schedule, the award's recordkeeping rules, and any litigation, protest, investigation, or audit hold. Do not use a generic “five to seven years” rule. Construction records and property records may have different periods and triggers from routine purchase orders.
For federal assistance, 2 CFR 200.334 generally starts its three-year period from submission of the final financial report, with special rules for renewed awards, property, and other circumstances. Litigation, claims, or audits begun before expiration can extend retention until resolution. A local schedule or award term can require longer preservation. Closing a contract does not authorize destruction while a hold remains.
Worked records decision
A library receives a request for the winning cloud-platform proposal and evaluator emails after announcing its intended award. The buyer logs the request, preserves the records, and asks the records officer to identify the actual disclosure trigger and exemptions. A blanket supplier confidentiality claim does not settle the matter. Counsel reviews substantiated confidential material, releases the segregable nonexempt records, and documents redactions and review rights.
The key distinction is between the supplier's requested protection and the agency's statutory authority to withhold. A public-records request is also separate from a bid protest: neither automatically extends the other's deadline.
DOJ's federal FOIA guide is a federal reference; use the applicable state or local statute for a municipal purchase.
Keep the records decision separate from the competition
An unsuccessful offeror may request records, seek a debriefing, and file a protest through different procedures. Log each request separately, identify its deadline, and send it to the authorized official. Do not promise that a records request pauses the award or extends the protest period unless the governing rule says so. Preserve the underlying material while counsel reviews any hold or release question.
A redacted public copy should retain enough context to make the disclosed information intelligible. Check pagination, attachment names, tables, and spreadsheet tabs so a redaction does not accidentally expose protected content or hide unrelated public material. Review electronic metadata and comments where relevant. Preserve the complete original, the produced copy, the exemption explanation, and the release date. These controls support both confidentiality and accountable access without letting a vendor decide unilaterally what the public may see.
When should an RFP proposal be released in response to a public-records request?
Immediately upon the physical or electronic receipt deadline for proposal submissions
At the commencement of oral presentations and product demonstrations by shortlisted offerors
At the disclosure trigger established by the applicable law, with legally supported redactions
Technical proposals remain permanently confidential and are never subject to public inspection
A vendor stamps 'Confidential and Proprietary' across every single page of its 250-page proposal, including its pricing tables and cover letter. How should the public purchasing department handle a subsequent public records request for the proposal?
Withhold the entire document from disclosure to avoid municipal liability for trade secret infringement
Immediately reject the vendor's proposal as non-responsive and re-award the contract to the next ranked offeror
Release the entire document without redaction because any blanket marking automatically forfeits all legal protections
Assess the governing exemptions, obtain specific supplier support where appropriate, and release segregable nonexempt information
Sections you finish are checked off in the contents.