How to File a FOIA Request for Your Personal Data (Step-by-Step Guide)

Most people associate FOIA with journalists investigating government scandals. But the Freedom of Information Act isn't just for reporters. Any person — citizen, resident, or even non-citizen — can file a FOIA request to find out what personal data federal agencies have collected about them.

The process is straightforward, requires no special forms, and is often free. Here's exactly how to do it.

What FOIA Actually Covers

The Freedom of Information Act (5 U.S.C. 552) gives you the right to request records from any federal agency. When you're requesting your own records, you're typically filing under both FOIA and the Privacy Act of 1974 (5 U.S.C. 552a), which specifically covers personal information held by federal agencies.

Key facts most people don't realize:

Anyone can file. You don't need to be a U.S. citizen. There is no eligibility test.
No special form is required. A written request that reasonably describes the records you want is sufficient under federal law.
Over 100 federal agencies accept FOIA requests, each with their own FOIA office.
Identity verification is required when requesting your own records under the Privacy Act, but it's simple — typically a notarized statement or a declaration under penalty of perjury.

Which Federal Agencies Might Have Your Data

Before you file, identify which agencies are likely to hold records about you. Here are the most common:

Financial and Tax Records

IRS (Internal Revenue Service): Tax returns, audit records, correspondence
CFPB (Consumer Financial Protection Bureau): Complaints you've filed, enforcement records
FinCEN (Financial Crimes Enforcement Network): Currency transaction reports, suspicious activity reports

Employment and Benefits

SSA (Social Security Administration): Earnings history, benefits records, disability claims
OPM (Office of Personnel Management): Federal employment records, background investigations
DOL (Department of Labor): Wage and hour complaints, OSHA records

Travel and Immigration

CBP (Customs and Border Protection): Travel history, border crossing records, Global Entry data
USCIS (U.S. Citizenship and Immigration Services): Immigration applications, case files
TSA (Transportation Security Administration): Screening records, watchlist status

Law Enforcement and Security

FBI: Background checks, investigation files, fingerprint records
DEA, ATF, U.S. Marshals: Investigation or encounter records
DHS (Department of Homeland Security): Fusion center reports, surveillance records

Health and Education

HHS (Department of Health and Human Services): Medicare/Medicaid records
VA (Department of Veterans Affairs): Service records, health records, benefits claims
Department of Education: Student loan records, grant history

How to File: Step by Step

Step 1: Locate the Agency's FOIA Office

Every federal agency publishes FOIA contact information on its website. The fastest way to find it:

Visit FOIA.gov — the central government portal that links to every agency's FOIA page
Search for "[Agency Name] FOIA" in any search engine
Many agencies now accept requests through the National FOIA Portal at FOIA.gov

Step 2: Write Your Request

Your request should include:

A clear statement that this is a FOIA/Privacy Act request
Your full legal name (including any former names)
Date of birth and Social Security Number (for identity verification under the Privacy Act)
A specific description of the records you want — the more precise, the faster the response
Your preferred format for receiving records (electronic is fastest)
A fee waiver request if applicable (see below)
A verification of identity — either a notarized signature or a statement under 28 U.S.C. 1746 declaring under penalty of perjury that you are who you say you are

Step 3: Submit Your Request

Most agencies accept requests through multiple channels:

Online portal (fastest) — many agencies use FOIAonline or their own submission systems
Email — sent directly to the agency's FOIA office
Mail — mark the envelope "FOIA/Privacy Act Request" on both the letter and the envelope

Step 4: Wait (and Know Your Rights)

Federal law requires agencies to respond within 20 business days (roughly one calendar month). In practice:

Simple requests may come back in 2-4 weeks
Complex requests can take months or even years at backlogged agencies
You'll receive an acknowledgment letter with a tracking number
You can check status online at most agencies

If the agency misses the 20-day deadline, you have the right to file an administrative appeal or take the matter to federal court.

How to Get Fee Waivers

Agencies can charge fees for search time, document review, and duplication. However, fee waivers are available in two situations:

The disclosure is in the public interest — it contributes significantly to public understanding of government operations
You're unable to pay — some agencies waive fees for individuals who demonstrate financial hardship

For personal records under the Privacy Act, many agencies waive fees automatically for the first 100 pages of duplication. Always include a fee waiver request in your initial letter — you can only be charged if the agency notifies you in advance and you agree.

What to Do With What You Get Back

When your records arrive, you may discover:

Data you didn't know existed — travel records going back decades, background check results, interagency sharing you never consented to
Errors in your records — under the Privacy Act, you have the right to request corrections
Exempted (redacted) information — agencies can withhold certain categories under nine FOIA exemptions, but they must justify each redaction

Review everything carefully. Errors in federal records can follow you for years — affecting background checks, security clearances, and even employment.

Why This Matters for Your Overall Privacy

Federal agencies are just one piece of the puzzle. While FOIA gives you visibility into government-held data, hundreds of private data brokers are simultaneously collecting, packaging, and selling your personal information with no equivalent transparency requirement.

The 20 U.S. states that have enacted comprehensive privacy laws — including California's CCPA, Virginia's VCDPA, and Colorado's CPA — give you deletion rights against private companies. But exercising those rights means filing separate requests with each data broker individually.

How Sirveil Handles FOIA for You

Sirveil is the only data broker removal app that includes a built-in FOIA feature. Instead of researching agencies, drafting letters, and tracking responses yourself, Sirveil's FOIA tool:

Identifies relevant agencies based on your profile
Generates properly formatted requests with all required elements
Handles identity verification through Stripe Identity so agencies can confirm you are who you claim to be
Tracks response timelines and flags overdue agencies

Combined with continuous data broker scanning and removal, Sirveil gives you visibility into both government and private-sector data collection — something no other consumer privacy tool currently offers.

Your data is held by more organizations than you think. FOIA is one powerful tool to find out exactly who has what. Sirveil makes the process as simple as tapping a button.

Sirveil is an AI-native data broker removal app that scans, removes, and monitors your personal data across the web. Plans start at $7.99/month or $79.99/year. Available now on Android via Google Play — coming soon to iOS. Learn more at sirveil.ai.