Legislative counsel reviews Public Records Act timelines, exemptions and MOSAIC risk

Legislative counsel reviewed key procedural duties and limitations under the state Public Records Act at the Government Operations & Military Affairs committee on Jan. 16, stressing deadlines, exemptions and privacy risks.

"The standard timeline for response ... is 3 business days," counsel said, adding there are narrow statutory exceptions and that certain records in active use may instead trigger a one‑calendar‑week response period. Counsel noted the act allows a maximum extension to 10 business days "in unusual circumstances," such as voluminous requests or the need for consultation with other agencies or the attorney general.

Counsel described the administrative remedy when an agency misses a time limit: "A custodian or the head of the agency who fails to comply with an applicable time limit is deemed to have denied the request," which gives the requester an immediate right to appeal to the agency head and ultimately to superior court.

On redactions and privacy, counsel emphasized MOSAIC analysis — evaluating how a small piece of confidential data combined with publicly available information can reveal intimate details about an individual — and said agencies must consider that risk when deciding whether to withhold or redact records.

Counsel also explained the certification that must accompany a withholding decision: it should identify the withheld records, cite the statutory basis for the denial, name the officials responsible and advise the requester of appeal rights. If the dispute reaches judicial review, counsel said a court can review confidential materials in camera (in chambers) to assess the exemption without making the information public.

The committee did not take action on the Public Records Act material; counsel suggested members review related penalty and appeals provisions independently and offered to provide a written memo on MOSAIC analyses for further study.