This annotated example uses semi-fictional information but is based off real-world public records requests that AI Now, Prof. Rashida Richardson, the Center for Constitutional Rights have filed in the past.
Freedom of Information Act Request
Federal Bureau of Investigation
170 Marcel Drive
Winchester, VA 22602-48432
Re: Freedom of Information Act Request[3]
To Whom It May Concern:
This is a request under the Freedom of Information Act, 5 U.S.C. Sec. 552 (“FOIA”)[4] , on behalf of the Center for Constitutional Rights (“CCR”) [5] for information regarding the Federal Bureau of Investigation (“FBI”) policies and actions involving the monitoring and surveillance of public protests surrounding police violence, policing reform, racial justice, and the Movement for Black Lives (“M4BL”).1 [6]
We ask that you please direct this request to all appropriate offices and components and/or departments within the FBI, including, but not limited to the following offices or components within the FBI: Joint Terrorism Task Force, National Press Office, Field Offices/Divisions2, Special Flight Operations Unit, and Critical Incident Response Group. [7]
Purpose of Request[8]
The request is specifically directed at the monitoring of protest activity and public gatherings whose subject matter or theme involved police brutality, criminal justice, racial inequalities, and the Movement for Black Lives. CCR is concerned that surveillance and monitoring practices of the Federal Bureau of Investigation, the Department of Homeland Security and other federal, state, and local law enforcement entities are chilling the First Amendment protected activities of Black organizers, activists and members of the public at large who are or who wish to speak out publicly in opposition to the alarming – indeed crisis-level – trend of police brutality and killing in the United States.
Recently, activists have become aware of the FBI and DHS’s use of databases for collecting data on political activity3 and “analyze” such data to create “suspect lists” and “profiles.” The database platforms used by the FBI which CCR is aware of have names such as “Wizard,” “All Seeing Eyes” and “Stratego” but there may be others. The use of these systems to monitor, surveil, intimidate and potentially criminalize those involved in First Amendment-protected activity is extremely worrying.
A. Definitions[9]
- Record(s). In this request the term “record(s)” includes, but is not limited to, all Records or communications preserved in electronic (including metadata) or written form, such as correspondences, emails, documents, data, videotapes, audio tapes, faxes, files, guidance, guidelines, evaluations, instructions, analyses, memoranda, agreements, notes, orders, policies, procedures, legal opinions, protocols, reports, rules, talking points, technical manuals, technical specifications, training manuals, studies, or any other Record of any kind.
- Agreement(s). In this request the term “agreement(s)” refers to any agreement, written or otherwise; communications; contracts and/or supplements, modifications or addendums to contracts or agreements.
- Communication(s). In this request the term “communication” means the transmittal of information (in the forms of facts, ideas, inquiries or otherwise).
- Key Protest(s). [10] In this request the term “key protest(s)” includes, but is not limited to, physical gatherings such as rallies, vigils, or public demonstrations regarding police violence, police brutality, police reform, policing abuses or anything related at the locations below:
- Minneapolis-St. Paul, MN
- Louisville, KY
- New York City, NY
- Los Angeles, CA
- Chicago, IL
- Washington, DC
- Portland, OR
- San Francisco, CA
- Oakland, CA
- Surveillance. In this request the term “surveillance” means any form of physical or non-physical/virtual observation, monitoring, recording, or transcription, whether conducted by an individual or through automated means such as by software, aerial surveillance vehicles (“drones”) or mounted cameras.
- “Suspect Lists” In this request, the term “suspect list” refers to any type of list generated by any of the Systems used by the FBI or DHS.
- Automated Decision System/ Automated Decision-making.[10b] In this request the term “Automated Decision System/ Automated Decision-making” refers to any system, software, or process that uses computation to aid or replace government, decision, judgments, and/or policy implementation that impact opportunities, access, liberties, rights, and/or safety. This can include the use of spreadsheet software like, Microsoft Excel.
- Database. In this request the term “databases” refers to information systems, either digital and manually maintained, that are used to compile, analyze and share information regarding individuals and/or groups to aid or inform criminal investigation. This includes any platform(s) engaged by the FBI and/or private, third-party entities contracted by the FBI, including but not limited to Wizard, All Seeing Eyes and Stratego, which have been used or are in use currently to gather information during any of the nationwide Key Protests referenced in this Request.
- Access. In this request the term “access” refers to the ability to do one or more of the following: view, query, add, delete, alter or retrieve records in the database or system.
- Audit. In this request the term “audit” means collecting data about the behavior of an algorithm in the relevant use context, and using data to assess the algorithm’s behavior, patterns, and anomalies. Audits are performed to assess the risks and errors an algorithm may present in the relevant use context, including whether the algorithm’s behavior is negatively or adversely affecting the rights or interest of people affected by the algorithm.
- Source Code. In this request the term “source code” means the instructions written by a human to create a computer program, software, or application.
- Validation Study or Analysis. In this request the term “validation study or analysis” refers to studies regarding the accuracy, validity, reliability or other factors related to a database or systems performance.
B. Request for Information[11]
For purposes of this FOIA request, requestors seek information in regards to protests that occurred from March 1, 2020 to Present.
- All records including information relating to the Database(s) that [DESCRIBE WHAT IT DOES] within the FBI and/or DHS, including but not limited to the screenshots of web-portals or interfaces, applications, any additional tools of analysis (including the source code and models for such analysis), developer documentation, and operator manuals. [IH12]
- All records maintained in the database [13]
- All records, including but not limited to documentation or internal communications, about the factors and data sources used to develop and determine the data fields in the Database.
- All records showing the full list of the data fields in the Database.[IH17]
- All records of policies regarding database use, management, maintenance, and compliance with relevant laws. This can include internal guidelines or memorandum regarding department audit or notification procedures or records of database maintenance or system updates.
- All records showing how FBI staff access and use the database. This can include user manuals, training documents, internal directives, and procedures, including any procedures in place specifically regarding data related to political protests and/or protests against law enforcement.[18]
- All records of, including communications regarding, audits, system tests, internal reviews, or intragovernmental investigations or inquiries of the Database. [IH19]
- Any internal policies, practices, procedures, memoranda and training materials for using the Database, and for storing, accessing, and sharing data analysis created by the Database. [IH20]
- Any internal policies, practices, procedures, memoranda and training materials for sharing data inputs and outputs created by the Database with entities outside of the FBI, including but not limited to the Steven Miller Institute.[IH21]
- Any records showing which entities outside of the FBI have accessed, used or requested to use, the Database(s).[IH22]
- Any records reflecting any agreements for or permission to develop, use, test, or evaluate the Database(s) used to create “profiles” and/or “suspect lists” and services with any third-party vendor or consultants, including but not limited to the Patriot Corporation. [IH23]
- Any Records referencing the public process preceding the procurement, acquisition, or development of the Database, including public meeting agendas or minutes, public notice, analyses (including fiscal or costs analysis), or communications between the FBI and elected officials or other public servants.[IH24]
C. Format of Production[25]
Please search for responsive records regardless of format, medium, or physical characteristics, and including electronic records. Please provide the requested documents in the following format:
- Saved on a CD, CD-ROM or DVD;
- In PDF or TIF format;
- In electronically searchable format;
- Each record in a separately saved PDF file;
- “Parent-child” relationships maintained, meaning that the requester must be able to identify the attachments with emails;
- Any data records in native format (i.e. Excel spreadsheets in Excel);
- Emails should include BCC and any other hidden fields;
- With any other metadata preserved. [25b]
D. The Requester[26]
The Center for Constitutional Rights (“CCR”) is a non-profit, public interest, legal, and public education organization that engages in litigation, public advocacy, and the production of publications in the fields of civil and international human rights. CCR’s diverse dockets include litigation and advocacy around policing, and racial and ethnic profiling. CCR is a member of several networks nationally and provides legal support to civil rights movements. One of CCR’s primary activities is the publication of newsletters, know-you-rights handbooks, legal analysis of current immigration law issues, and other similar materials for public dissemination. These and other materials are available through CCR’s Development, Communications, and Education & Outreach Departments. CCR operates a website, www.ccrjustice.org, which addresses the issues on which the Center works. The website includes material on topical civil and racial justice rights issues and material concerning CCR’s work. All of this material is freely available to the public. In addition, CCR regularly issues press releases and a regularly updated blog, as well as “action alerts” sent to over 50,000 members that notify supporters and the general public about developments and operations pertaining to CCR’s work. CCR staff members often serve as sources for journalist and media outlets, including on issues related to racial justice, police brutality, racial discrimination, and the right to dissent.
E. Fee Waiver[27]
The Requester is entitled to a fee waiver pursuant to 5 U.S.C. § 552 (a)(4)(A)(iii), 6 C.F.R. § 5.11(k), and 28 C.F.R. § 16.10(k) on the grounds that “disclosure of the requested records is in the public interest because it is likely to contribute significantly to the public understanding of the activities or operations of the government and is not primarily in the commercial interest of the requester[s].” 5 U.S.C. § 552(a)(4)(A)(iii); see also 6 C.F.R. § 5.11(k) (records furnished by DHS without charge if the information is in the public interest, and disclosure is not in the commercial interest of institution); 28 C.F.R. § 16.10 (k) (records furnished by DOJ without charge if the information is in the public interest, and disclosure is not in the commercial interest of institution). See, e.g., McClellan Ecological v. Carlucci, 835 F.2d 1282, 1285 (9th Cir. 1987). Requester meets the requirements for a fee waiver because the subject of the request concerns the operations or activities of the government; the disclosure of the information is likely to contribute to a significant public understanding of government operations or activities due to the Requester’s expertise in the subject area and ability to convey the information; the Requester’s primary interest is in disclosure; and they have no commercial interest in the information. In addition, pursuant to 5 U.S.C. § 552(a)(4)(A)(ii)(II), 6 C.F.R. § 5.11(k)(2)(iii), (k)(3)(ii), and 28 C.F.R. § 16.10(k)(2)(iii), (k)(3)(ii), the Requester qualifies as a “representatives of the news media,” defined as “any person or entity that gathers information of potential interest to a segment of the public, uses its editorial skills to turn the raw materials into a distinct work, and distributes that work to an audience.” 5 U.S.C. § 552(a)(4)(A)(ii); see also 6 C.F.R. § 5.11(b)(6); 28 C.F.R. § 16.10(b)(6). [28]
As described in Part D above, the Requester is a non-profit organization dedicated to civil rights and human rights, and have a proven track-record of compiling and disseminating information and reports to the public about government functions and activities, including the government’s record and position on surveillance, protests, policing and racial justice. The Requester has undertaken this work in the public interest and not for any private commercial interest. Similarly, the primary purpose of this FOIA request is to obtain information to further the public’s understanding of government actions and policies in regards to the surveillance of peaceful protestors. Access to this information is crucial for the Requester and the communities it serves to evaluate governmental surveillance actions and their potential detrimental efforts.
As stated above, the Requester has no commercial interest in this matter. The Requester will make any information that they receive as a result of this FOIA request available to the public, including the press, at no cost. Disclosure in this case therefore meets the statutory criteria, and a fee waiver would fulfill Congress’ legislative intent in amending FOIA. See Judicial Watch Inc. v. Rossotti, 326 F.3d 1309 (D.C. Cir. 2003) (“Congress amended FOIA to ensure that it be ‘liberally construed in favor of waivers of noncommercial requesters.’”).
In the alternative, we request a limitation of processing fees pursuant to 5 U.S.C. § 552(a)(4)(A)(ii)(II). (“[F]ees shall be limited to reasonable standard charges for document duplication when records are not sought for commercial use and the request is made by . . . a representative of the news media.”). See also 6 C.F.R. § 5.11(d)(1); 28 C.F.R. § 16.10(d)(1). If no fee waiver is granted and the fees exceed $250.00, please contact the Requester to obtain consent to incur additional fees.[29]
F. Expedited Processing[30]
The Requester is entitled to expedited processing of this request because there is a “compelling need” for the information. 5 U.S.C. § 552(a)(6)(E)(i)(I). A “compelling need” is established when there exists an “urgency to inform the public about an actual or alleged Federal Government activity,” when the requester is a “person primarily engaged in disseminating information,” 6 C.F.R. § 5.5(d)(ii); 28 C.F.R. § 16.5(e)(ii).
There is an urgent need to inform the public of the policies and decision-making regarding government involvement in surveillance and monitoring of peaceful protestors and organizers.4 Large campaigns and events around policing, racial equality, and BLM continue to be organized and promoted on a nearly daily basis nation-wide. [31] The interest from members of the public to participate in the protests and support this movement continues to grow, with the media having an equal interest to report on the issues being raised by these protests. Members of the public, particularly those interested in participating in or supporting protests, have a right to know the level of governmental surveillance of these protests and movements and the potential effects on their privacy and security.
As described in part D above, Center for Constitutional Rights is primarily engaged in disseminating information. CCR has a proven track-record of compiling and disseminating information and reports to the public about government functions and activities, including the government’s record on surveillance of political and social movements as well as those movements’ leaders and participants. [32] CCR will use its press and media connections as well as its considerable web infrastructure to publicly disseminate information received from this request on a national scale. Based on the findings of this request, CCR will also engage directly with groups and communities found to be surveilled or under surveillance for their involvement in protected political activity.
In addition, the DOJ grants expedited processing where the subject of the request is a “matter of widespread and exceptional media interest in which there exist possible questions about the government's integrity that affect public confidence.” 28 C.F.R. § 16.5(e) (iv). As discussed in the “Background” section above, there is widespread and exceptional media interest in M4BL, in ongoing police brutality and lack of accountability, and on surveillance of political protest activities. The government’s surveillance of activity protected by the First Amendment calls into question government integrity and affects public confidence regarding accountability for police brutality.
G. Certification & Conclusion[33]
The Requester certifies that the above information is true and correct to the best of the Requester’s knowledge. See 6 C.F.R. § 5.5(d)(3); 28 C.F.R. § 16.5(e)(3). If this Request is denied in whole or in part, CCR asks that the DHS and FBI justify all deletions by reference to specific exemptions of FOIA. The Requester expects the FBI to release all segregable portions of otherwise exempt material, and reserves the right to appeal a decision to withhold any records or to deny the within application for expedited processing and waiver of fees. [34]
Please furnish all applicable Records and correspondence in electronic format as specified above to: Ian Head, Center for Constitutional Rights, 666 Broadway, 7th Fl., New York, NY 10012. [35]
Thank you for your consideration.
Sincerely,
______________________________________
1 See http://m4bl.org
2 We believe the following field offices, in particular, are likely to have responsive records: New York, Chicago, and New Orleans.
3 See, for example, Joe Smith, “Leaks Show FBI and DHS Using Secret Databases.” Washington Post, January 1, 2022.
4 For example, a conference at Georgetown University Law Center entitled “The Color of Surveillance” was scheduled for April 8, 2016 to explore racial bias in government monitoring, including of Black Lives Matter activists. See conference programming at: http://www.law.georgetown.edu/news/press-releases/the-color-of-surveillance-georgetown-law-conference-to-explore-racial-bias-of-government-monitoring.cfm. (“The day-long conference will feature Pulitzer Prize-winning historians, scholars, activists and members of the criminal justice, law enforcement and national security communities.”)
Many details in this example FOIA have been fictionalized, re-written and simplified. Parts of this request were taken from an actual FOIA filed by Color of Change and Center for Constitutional Rights in 2016. For the actual request filed by CCR and COC, please see: https://ccrjustice.org/sites/default/files/attach/2016/10/COC%20Complaint%20Exhibits%20ECF%20Dkt%201-1_1.pdf
We find it useful to be specific about what parts of each agency you want your request to be directed to. This doesn’t mean that these are the only offices or components that the agency gets to search – they are still obligated to conduct searches anywhere they believe may have documents. But pointing them towards specific places they should start or prioritize in their searches can be useful.
Here is where you can choose to lay out more background and reasons for making your request.
We suggest including at least a few sentences explaining why you’re making this request, especially if you’re asking for expedited processing. It’s useful to cite to news articles and other public information that might show why this request is important, and why people beyond just you or your organization would be interested or in need of the information you seek. For example, here you see we name and discuss the several fictional databases and the concerns we have about them.
If you want, you can make this section “tell a story” about why your organization is making this request, which can make the FOIA request itself an advocacy tool, and potentially garner media or public attention. Or, you can keep this section short and simple, if your strategy isn’t to draw attention.
It is good to define terms that you are going to use in your request that might be interpreted by government officials in different ways. Most importantly, we recommend defining what a “record” is, since it can include all kinds of types.
“Communications” is also something we recommended defining – for example, you aren’t looking for just letters, but also emails, faxes, notes or any other type of recorded communication that you might not be aware of.
This is the most important part of your request. It is where you list what you are actually looking for, and is what government agencies and officials will be referencing when they do their searches.
Trying and separate out your request by type of record, or by theme. For example, you could ask for all “communications” between federal and local agencies regarding a set of protests. Then separately, you could request any data collected by agencies in regards to those protests.
How you choose to organize this section of your request will depend on what you’re looking for, and what make makes the most sense. For instance, if it’s a request specific to certain government officials, it may be better to organize it by those officials.
If there are records specific to an event or person or report that you’re looking for, you may want to cite to that. For example, there might have been a news article that mentioned an FBI report on surveillance. In your request, you might ask for any records and communications at the FBI regarding that report, and cite to the news article that names the report and shows it exists and that the FBI is discussing it.
[IH12]This provision seeks the actual algorithm and other relevant technical information. It is important to specific to the best of your knowledge what the system does. Questions to consider when describing the system:
-Does it predict behavior or actions?
-Is it used to determine what resources a person will receive or how they may be treated?
-Is it classifying an individual or group of people?
It may or may not be strategic to request ALL records maintained in the database. If it is a large database, an agency may respond and ask you to narrow your request, or there may be costs or other challenges. However, if you are looking to do a detailed audit of a database it can be a useful request.
You can also modify this request to certain “all” of certain types of records maintained by the database.
Yeah, I think a reason in favor of using this is where the party is interested in doing a full technical audit of a system, and to that extent having the full database would be more valuable than any subset that was based on an interpretive judgment by the agency.
You could acknowledge the costs/other challenges here but still keep it in case there are groups that have capacity for a more detailed audit.
[IH16]NATE – I am still working on language for this annotation
[IH17]These provisions seek information about the fields or variables a database may use to produce an output (for example, a prediction or determination).
This provision can include requests for purging, notification, and auditing requirements, if any.
This provision seeks information to help you determine what level of deference agency staff may give to the system’s outputs. Typically, the lack of any information, directives, and/or guidances suggests a fairly subjective process.
[IH19]This provision seeks information on whether the agency or vendor has audited or tested the database for bias and errors.
[IH20]This provision seeks information on how the system is used, as well as how information may be shared. Ideally, this information will help identify security features of the system and agencies procedures to prevent or address misuse, abuse, etc.
[IH21]This provision seeks information about policies or procedures for external sharing. You should specify external entities of concern like law enforcement or federal agencies.
[IH22]This provision seeks information about whether information has ACTUALLY been shared externally, regardless of whether there are policies or procedures and whether they have been followed.
[IH23]This provision is seeking information about contracts with consultants or other third-parties.
[IH24]This provision seeks to identify if there was any public communications about the system. This information can be useful for any advocacy regarding public procurement loopholes or problems.
This may seem inconsequential but it is important. We recommend asking for everything as PDF files – you don’t want to have to look through boxes of paper files. We also recommend asking for files in a searchable format, and for data files in “native” format so that you can more easily access and analyze any data yourself.
It can be helpful to include a summary description of your organization. A focus on the description should be the work the organization does publicly – whether it is connected to a broad membership base (how big?) through different platforms (social media? Press releases? Listservs?) or if it regularly publishes publicly-available reports or resources. Has the organization done FOIAs before, and publicized the documents it received?
The goal is to show that if you get documents from your FOIA request, they will be used and shared for the public good, rather than kept for personal or commercial benefit.
Because agencies usually will charge for copies of documents, or for the processing of documents, it is important to ask for a fee waiver. The FOIA statute along with agency regulations let you request a partial or full waiver for fees if you can show that the disclosure of documents is in the “public interest” of the requesting organization or individual.
In this fee waiver example, we cite to both the applicable parts of the FOIA statute, along with any applicable sections of the Code of Federal Regulations that govern each agency. For instance, 6 C.F.R. § 5.11 governs fees in FOIA requests for the Department of Homeland Security, and 28 C.F.R. § 16.10 governs fees for the Department of Justice.
It is also important to make sure to have language that lets the agency know not to do any processing or producing of documents that is costs more than a certain amount of money, so that you do not suddenly end up with a bill for hundreds of dollars. You can make the maximum cost whatever dollar amount works for you or your organization.
This is helpful language to include, reminding agencies to “justify” and mark anything they might “redact” when producing documents in response to your request. Basically, you’re asking them to tell you why they redacted something, or why they did not give you certain documents. It also reminds agencies that just because part of a document might need to be redacted, they should still produce the rest of that document to you unredacted.
Make sure to provide one specific address and other contact information to the agencies where they can send any responses. It is advisable to just provide one contact person and address, otherwise agencies may send some responses to one address, and others to another. You want to make sure it is an address and/or email address that you have access to and can check regularly.