Blog · Analysis · Last reviewed June 16, 2026

The Redaction Model Becomes the Public Records Clerk

AI can help agencies find records, detect sensitive information, and prepare releases faster. It can also make public access depend on a hidden layer of search ranking, privilege prediction, and automated black bars. The public-records clerk is becoming a model-mediated office.

The Black Bar Is a Decision

Public-records law is a machine for making government memory contestable. FOIA.gov explains the federal Freedom of Information Act as a right to request agency records, with disclosure required unless information falls within one of nine exemptions. Those exemptions protect interests such as privacy, national security, confidential business information, privilege, and law enforcement.

The black bar looks simple. It is not. A redaction is a legal judgment, a privacy judgment, a security judgment, and a public-memory judgment compressed into a rectangle. The FOIA statute requires agencies to release any reasonably segregable portion of a record after exempt material is removed, and to indicate the amount and exemption for deletions where technically feasible. The point is not merely to hide. It is to hide narrowly enough that lawful public knowledge still survives.

AI enters this office at the point of pressure. Agencies face large email collections, scanned paper, video, attachments, chat logs, spreadsheets, cloud repositories, and repeated requests for similar material. A model that can cluster documents, rank likely responsiveness, identify names or faces, suggest exemptions, or draft redaction marks looks like relief.

Search Is Disclosure Power

The first automated decision in a records request may happen before redaction: what counts as responsive? Keyword search already shaped disclosure by making some terms easy to find and others invisible. Semantic search, machine learning, and e-discovery tools widen the field. They may find relevant records a rigid keyword misses. They may also bury records if the query, model, repository, or training examples encode the agency's preferred reading of the request.

NARA's 2022-2026 strategic plan says the agency will increase automation of FOIA search and review through AI and related tools. Its public AI-use inventory lists a planned FOIA Discovery AI Pilot intended to automate discovery of relevant records and redaction of sensitive data. NARA's 2024 Records Management Self-Assessment found that 18.6 percent of agencies subject to FOIA reported using AI or machine learning to aid search and retrieval, while 73.6 percent reported using e-discovery tools for FOIA or legal discovery.

Those numbers should be read carefully. They do not mean the model is deciding every request. They do show that public access is entering the tooling world of litigation discovery: deduplication, clustering, predictive coding, entity extraction, workflow queues, audit logs, and review platforms.

Redaction Is Not Deletion

Automated redaction is attractive because it promises speed and consistency. The DOJ Office of Information Policy's NexGen FOIA Technology Showcase 2.0 specifically sought tools for AI-assisted case processing, e-discovery, and redaction, including automatic redaction for similar forms, record types, digital content, video, and data. That is a practical need. One body-camera video, email chain, or spreadsheet can contain dozens of third-party privacy interests.

But redaction is not deletion. It is a public explanation of what has been withheld and why. If a model detects too much, the public receives a legally polished silence. If it detects too little, private people, witnesses, children, victims, employees, medical details, or security information may be exposed. The mistake is asymmetric: over-redaction harms oversight invisibly, while under-redaction may harm people immediately.

The danger is automation bias inside a legal office. A suggested exemption can harden into a default. A confidence score can look like review. A batch rule can turn one mistaken judgment into thousands of black bars. A machine can make withholding feel neutral because it was applied consistently.

Where Automation Enters

FOIA officials are not blind to this. In a 2023 Chief FOIA Officers Council meeting, DOJ described AI as a promising area for record processing while stressing human monitoring and safeguards. The 2022-2024 FOIA Advisory Committee later recommended requests for information on AI tools and techniques as aids to FOIA processing. DOJ's 2025 summary of agency Chief FOIA Officer reports likewise said AI and machine learning may improve search and review when paired with human monitoring and safeguards consistent with FOIA.

That phrase, "consistent with FOIA," carries the whole problem. A tool can be fast and inconsistent with FOIA if it hides segregable material, fails to mark exemptions, obscures search adequacy, or makes appeal evidence unusable. Benchmark accuracy does not prove suitability for protest footage, immigration records, police misconduct files, procurement emails, scientific dissent, or civil-rights complaints.

The model's role must therefore be legible. Did it expand search, narrow search, sort records, suggest exemptions, redact text, generate a response letter, or build a Vaughn index? Each task carries different risks.

The Governance Standard

A serious AI-assisted records program should preserve disclosure as the default legal posture, not treat automation as a backlog eraser.

First, separate search assistance from withholding authority. A model may help find records; it should not silently decide the universe of responsive records without documented search terms, repositories, model settings, and human approval.

Second, require redaction provenance. Each redaction should preserve who or what proposed it, who approved it, the exemption claimed, the confidence or rule used if relevant, and whether the mark was batch-applied.

Third, measure both kinds of error. Agencies should test for wrongful disclosure and wrongful withholding. A privacy audit alone is not enough; public access requires measuring how much releasable material the tool suppresses.

Fourth, protect appeal records. Requesters need enough information to challenge search adequacy, redaction scope, and exemption use. Model-assisted decisions should not become unreviewable because the workflow cannot reconstruct them.

Fifth, disclose tool use where it materially shapes the response. A requester should know when AI or machine learning materially assisted search, review, redaction, or response drafting, subject to narrow security limits.

Sixth, keep human judgment accountable. The final legal decision should remain with trained officials who can explain the exemption, not with a vendor workflow, model score, or batch template.

What This Changes

The redaction model is a quiet cousin of the AI register, the vendor-mediated state, and the agent action receipt. It does not announce itself as a dramatic AI system. It sits in a records office and decides which parts of government memory become visible.

The best version expands access: better search, faster processing, narrower privacy protection, stronger release logs, and more consistent treatment of similar records. The worst version automates official forgetting. It turns every sensitive category into a wider black bar, every broad exemption into a template, and every appeal into a fight against a workflow no requester can inspect.

The clerk was always an interface between state memory and public knowledge. The AI version must be an access instrument, not only a risk-control instrument. A democracy does not need faster secrecy. It needs lawful disclosure, narrow withholding, and records that explain their marks.

Sources

Return to Blog