Reason.com - Free Minds and Free Markets
Reason logo Reason logo
  • Latest
  • Magazine
    • Current Issue
    • Archives
    • Subscribe
    • Crossword
  • Video
  • Podcasts
    • All Shows
    • The Reason Roundtable
    • The Reason Interview With Nick Gillespie
    • The Soho Forum Debates
    • Just Asking Questions
    • The Best of Reason Magazine
    • Why We Can't Have Nice Things
  • Volokh
  • Newsletters
  • Donate
    • Donate Online
    • Donate Crypto
    • Ways To Give To Reason Foundation
    • Torchbearer Society
    • Planned Giving
  • Subscribe
    • Reason Plus Subscription
    • Print Subscription
    • Gift Subscriptions
    • Subscriber Support

Login Form

Create new account
Forgot password

FOIA

Oops! The EPA Published the Social Security Numbers of People Who Filed FOIA Requests

Thanks to a design bug in a government transparency website, dozens of social security numbers were mistakenly made public.

Joe Setyon | 9.4.2018 11:00 AM

Share on FacebookShare on XShare on RedditShare by emailPrint friendly versionCopy page URL
Media Contact & Reprint Requests
Hafakot/Dreamstime.com

The Freedom of Information Act (FOIA) is supposed to facilitate government transparency, allowing intrepid reporters and other government accountability groups to pull back the curtain on government behavior. While maximal transparency might seem like a good thing, most people would agree that some information should remain private—like the social security numbers of those filing FOIA requests.

Unfortunately, a design error in foiaonline.gov resulted in at least 80 Social Security numbers of people filing FOIA requests were made public—either partially or in full—for nearly two months, if not longer, according to CNN. It wasn't just social security numbers, either: birthdates, contact information, and immigrant identification numbers were also unintentionally made available to the public.

Foiaonline.gov is a FOIA request portal run by the Environmental Protection Agency (EPA), though other federal government agencies, including Customs and Border Protection (CBP), the Justice Department, and the Small Business Administration (SBA), use it as well. The site underwent a system upgrade on July 9, but there was a design bug. CNN describes the issue thusly:

The problem was with the feature that allowed anyone to search existing FOIA requests. The idea is that people can see what has already been requested, by whom, and in some cases what may have been provided. When users click through to the individual request, the description field is withheld, pending agency approval. Yet those descriptions were viewable in full on the search results page, including if Americans had included their or others' Social Security numbers or any other personal information.

No one was aware of the glitch until CNN contacted the EPA last week. At that point, the EPA removed what sensitive information it could. But since other departments use the portal as well, each one had to remove the descriptions from FOIA requests relating to their specific agencies.

"Recently it was discovered that [potentially identifiable information] in some records was exposed to the public," the EPA wrote Thursday in an email to the other agencies' system administrators. "The PMO [Primary Management Office] has identified the cause of this issue and this afternoon implemented program fixes that resolved the problems. This issue will shortly be publicized by the press. It will also be reported that after our fix, that some names and addresses still do appear in publicly available FOIAonline records. A review by the PMO has found that this information has been marked as publicly viewable by the reporting agencies. It is requested that partner agencies review publicly viewable information to ensure that any personal information is specifically intended to be presented as such."

While the error was eventually fixed, the bug raises questions about how much personal information you should include when filing a FOIA request. As CNN points out, the FOIA website's "Privacy and Security Notice" warns those filing requests that "personal information…may be publicly disclosed on FOIAonline or on third-party Web sites on the Internet." At the same time, the CBP FOIA request form asks filers to "include as much information as possible to assist us in locating the record(s) you are seeking."

In the past, government incompetence hasn't been the only thing making life harder for those filing FOIA requests. In September, Reason noted how state and local agencies were suing citizens who filed such requests.

On thing is for sure: Getting the government to disclose information it has no business hiding shouldn't come with so many risks.

Start your day with Reason. Get a daily brief of the most important stories and trends every weekday morning when you subscribe to Reason Roundup.

This field is for validation purposes and should be left unchanged.

NEXT: The Problem With Prohibitions on Electronic Contraband Like 3D-Printed Gun Designs

Joe Setyon is currently an associate story editor for The Western Journal, a publication based in Arizona. He is a former assistant editor at Reason.

FOIAEnvironmental Protection AgencySocial SecurityPrivacyTransparencyIncompetence
Share on FacebookShare on XShare on RedditShare by emailPrint friendly versionCopy page URL
Media Contact & Reprint Requests

Show Comments (27)

Latest

Defenders of Trump's Birthright Citizenship Order Offer an Implausible Take on a 127-Year-Old Precedent

Jacob Sullum | 5.12.2025 4:52 PM

Why DOGE Failed

Eric Boehm | 5.12.2025 3:20 PM

The Indian-Pakistani Ceasefire Is What U.S. Diplomacy Should Look Like

Matthew Petti | 5.12.2025 12:11 PM

Republicans Want To Redefine Obscenity

Elizabeth Nolan Brown | 5.12.2025 11:45 AM

David Souter Shaped the Supreme Court Through the Backlash He Inspired

Damon Root | 5.12.2025 10:50 AM

Recommended

  • About
  • Browse Topics
  • Events
  • Staff
  • Jobs
  • Donate
  • Advertise
  • Subscribe
  • Contact
  • Media
  • Shop
  • Amazon
Reason Facebook@reason on XReason InstagramReason TikTokReason YoutubeApple PodcastsReason on FlipboardReason RSS

© 2024 Reason Foundation | Accessibility | Privacy Policy | Terms Of Use

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

r

Do you care about free minds and free markets? Sign up to get the biggest stories from Reason in your inbox every afternoon.

This field is for validation purposes and should be left unchanged.

This modal will close in 10

Reason Plus

Special Offer!

  • Full digital edition access
  • No ads
  • Commenting privileges

Just $25 per year

Join Today!