Making Public Records Truly Accessible Online: An Administrator's Guide

Public records work has shifted from answering requests to anticipating them. Federal FOIA requests hit a record in fiscal year 2025, per the Justice Department's tally across 117 agencies, while processing fell behind.

For administrators, a record can be legally public under FOIA or a state statute and still exist only in a basement box, a microfilm reel, or a retired vendor's database. Residents expect it online, free, and searchable, and under the DOJ's ADA Title II rule, whatever goes online must meet WCAG 2.1 Level AA.

Each scan also forces a privacy call: redaction that was optional at the counter becomes unavoidable at internet scale.

Public vs. Online: What Records Access Actually Means

A record's public status does not guarantee that it is online, free, or instantly downloadable. Administrators who conflate the two set resident expectations they cannot meet and generate avoidable friction for their own staff.

Three Distinct Ideas

Keep these separate when you talk about access:

• Public: The record is subject to disclosure under law and not fully exempt. Its status says nothing about how someone gets it.
• Available on request: A resident can obtain the record by submitting a formal request, which staff then locate, review, redact, and release within a statutory window.
• Online, free, and easy: The record sits on a portal, searchable and downloadable without any request at all.

What the Law Actually Requires

Most federal and state public records laws, including those governing public sector pay transparency, require agencies to respond to requests. They generally do not require you to post records online in advance, even as a digital government implementation roadmap pushes agencies toward portal-based access. FOIA and its state counterparts guarantee a process, not a proactively published library. That legal floor is lower than what most residents assume, and the gap is where frustration lives.

When people cannot find a document they believe should be a click away, they file a request. Each request consumes staff time for intake, search, redaction, and response, so the gap between expectation and reality directly inflates workload.

A Simple Scope Test

To decide what belongs on the portal versus what stays request-only, ask of each record category:

• Is it requested frequently by the public?
• Is it low-sensitivity or easily redacted at scale?
• Does it exist in a consistent digital format?

Categories that clear all three are proactive-disclosure candidates. Everything else stays on request until you can close those gaps.

The Legal Framework: FOIA, State Public Records Laws, and Exemptions

A request to a federal agency and a request to a county clerk follow two different legal maps, reflecting the federal state collaboration framework. The federal Freedom of Information Act (FOIA) governs records held by federal departments and agencies. State and local government records, from city council emails to state agency contracts, are controlled by that state's own public records act, and no single state law mirrors another exactly.

The four mechanics requesters ask about

Most public records work with administrators revolves around four questions. First, deadlines: state laws set response windows, often between three and fifteen business days, though extensions are common for complex requests. Second, fees: agencies may charge for search time, review time, or copying, but fee structures and waivers differ widely, with some states capping costs or waiving fees for public interest requests. Third, exemptions: the law lists categories of records that may be withheld, but almost all exemptions are discretionary, not mandatory. Fourth, appeals: if a request is denied, the requester has a route to challenge that decision, usually through an administrative appeal and then a court.

Common exemption categories vary by state

Personal privacy, law enforcement records, deliberative process, security, and attorney-client privilege appear in most public records acts, but the boundaries shift. For example, one state may exempt all investigative files, while another releases closed investigations. Some states add exemptions for critical infrastructure or trade secrets. Administrators should read their state's exemption list alongside attorney general guidance, not assume a federal standard applies.

Undigitized records and proactive disclosure

Digitization status does not change the legal obligation. If a record exists only on paper, in a legacy database, or in offsite storage, the requester can still ask for it, and the agency generally must search those sources. The work may take longer and cost more, but the right of access does not evaporate because a record is not online. At the same time, many states now push records online through proactive disclosure mandates, a shift in public policy making. These laws require agencies to post certain categories, such as meeting minutes, budgets, contracts, and salaries, without waiting for a request. Proactive posting reduces request volume and is the clearest legal lever for moving records from filing cabinets to portals.

How Much Pressure Are Records Offices Under?

Federal FOIA demand hit a record in fiscal year 2025, according to the Justice Department's summary of annual reports from 117 agencies. Requests grew faster than processing, which is why administrators increasingly treat proactive online disclosure as a way to relieve pressure, not an optional extra. The summary did not publish government-wide backlog, full-grant, or median processing figures, and comparable state and local request volumes are not consistently reported.

State-by-State Accessibility: How Jurisdictions Compare

There is no national standard for public records online accessibility, so deadlines, fees, and portals vary widely between states and between a state and its own cities. The table below is a sample of states, one state agency, and several local governments drawn from attorney general guides, city records offices, and the National Freedom of Information Coalition. It is not a 50-state survey. A few patterns stand out: some deadlines are flexible standards ("as soon as possible" in Delaware, a "reasonable" estimated completion date in Oregon) rather than fixed day counts, and fees range from flat per-page charges to itemized staff-time billing. The most complete online portals in this sample are run by cities such as Seattle and Tacoma, not by states, and statutes change, so confirm details against the current law before you rely on them.

Related Articles

Barriers to Online Access: Backlogs, Legacy Paper, Silos, and Funding

A digitization backlog is the pile of records that exist only on paper, microfilm, or outdated electronic formats. None of it can be searched or released online until someone scans, indexes, and reviews it. Even the best-resourced records agency in the country is far behind.

The Scale of the Problem

The National Archives' holdings have grown from about 3 billion pages to roughly 12 billion over the past 40 years.¹ NARA has digitized around 500 million of those pages, roughly 4 percent, leaving about 11.5 billion pages offline.¹ Meanwhile, about 100,000 cubic feet of new unprocessed records arrive each year, on top of incoming electronic records.²

Funding is moving the other way. NARA's FY 2026 request of $414.7 million came in $59.5 million below the FY 2025 enacted level,³ and advocacy analyses describe the proposal as a 33 percent cut to electronic-records programs.⁴ Those are proposed figures, not final appropriations. No comparable national estimate exists for how much state or local material remains undigitized. That gap is itself a warning: most jurisdictions are not measuring the problem.

Four Recurring Barriers

• Legacy paper and microfilm: Decades of permits, minutes, and case files sit in boxes or on film that must be handled, scanned, and indexed one item at a time.
• Siloed departmental systems: Clerks, police, planning, and HR often run separate platforms with no shared search, so one request triggers several manual hunts.
• Thin funding: Digitization competes with frontline services and rarely survives a tight budget cycle.
• Understaffed records offices: A small team handling request intake, redaction, and retention has little capacity left for conversion projects.

Sizing and Prioritizing Your Backlog

Measure the backlog in three dimensions, an Evidence-Based Policymaking approach, before you request money. Count volume in linear feet or boxes. Pull request logs to see which series people actually ask for. Then check each series against your retention schedule. Records already eligible for destruction should be disposed of lawfully, not scanned.

With that inventory in hand, rank work using a simple lens:

• High demand: Series that generate repeat requests pay back scanning costs fastest.
• High risk or at-risk media: Brittle paper, fading microfilm, and obsolete storage formats may not survive another decade.
• Legally required: Records that statutes or proactive-disclosure policies require you to post come first, regardless of demand.

A backlog you can describe in feet, request counts, and retention status is a Government Reform budget request. One you cannot describe is just a complaint.

Born-Digital Records: Texts, Teams Chats, and Vendor Transitions

A paper file sits still until someone moves it; a text thread deletes itself in thirty days unless someone intervenes. That contrast explains why born-digital communications now generate more compliance failures than any filing cabinet ever did.

The Record Follows the Business, Not the Device

NARA Bulletin 2015-02 treats electronic messages about agency business as federal records, covering text messaging, chat and instant messaging, social media messaging, and voice messaging.¹ Advisory AC 23.2025 extends that reach to third-party applications including WhatsApp, Signal, Telegram, WeChat, and Snapchat, even when the account is personal. North Carolina's digital communications guidance reaches the same conclusion from state law: texts and instant messages sent by public employees in the course of business are public records, alongside email, social media, and websites. Notably, NARA's electronic messages schedule carves out collaboration platforms such as Microsoft Teams and SharePoint, but exclusion is not exemption. Those messages simply need coverage under a different approved schedule.

Where Agencies Lose Records

Three failure modes recur: platform auto-delete settings that destroy content before anyone evaluates it, staff conducting business on personal devices outside any capture system, and migrations where a vendor contract ends and the data goes with it. Retention attaches to the record and its schedule, not to the platform, so a switch in providers does not reset an obligation.¹

Three Controls Worth Putting in Place

• Written policy: Define approved channels, forbid agency business on uncaptured personal accounts, and require case-by-case evaluation rather than blanket transitory treatment.
• Retention settings: Align platform defaults to the governing schedule. Unscheduled messages must be held as permanent until disposition is approved.
• Contractual export rights: Require machine-readable export, migration support, and post-termination access in every vendor agreement.

Portal Accessibility and Usability: WCAG, Language Access, and Search Quality

The U.S. Department of Justice's ADA Title II web accessibility rule makes WCAG 2.1 Level AA the technical standard for state and local government web content and mobile apps. A 2026 interim final rule, effective April 20, 2026, revised the original 2024 compliance dates: entities serving 50,000 or more people now have until April 26, 2027, while smaller entities and special districts have until April 26, 2028. For a small records office, work in this order: inventory portal, app, and PDF content; fix anything currently used to request or access records first; then document any undue-burden or fundamental-alteration claims in writing.

Best Practices for Digitization and Proactive Disclosure

Most agencies still treat digitization as a conversion project when it works better as a triage sequence. The order matters more than the equipment budget, because scanning the wrong boxes first locks in years of sunk cost without reducing a single request.

Sequence the Work: Stop, Publish, Then Scan

Start by stopping the bleeding. Records created today in email, chat platforms, and case management systems should be captured and retained correctly before anyone touches a filing cabinet, or the backlog simply regenerates. Next, publish what people already ask for. The Justice Department's proactive disclosure guidance reflects a long-standing practice of posting records once they have been requested roughly three times, though the department frames this as guidance rather than a universally binding threshold.¹ HHS, in its 2026 Chief FOIA Officer Report, pushes further: post frequently requested records quickly and systematically in advance of any public request, in the most useful, searchable, and open formats available.² Agencies taking this approach report less duplicative processing, though quantified savings are rarely published.

Only after those two steps should you digitize the backlog, prioritized by demand and risk. NARA's digitization strategy covering 2015 through 2024 framed the goals plainly: expand online access, protect fragile originals from handling, and enable reuse.³

Mine Your Own Request Log

Your request-tracking system already identifies the record types that drive most of your volume: salary tables, inspection reports, permits, incident logs, contracts, body-camera indexes. Pull a year of requests, cluster them, and publish the top tier as standing datasets. Everything posted proactively is a request you never process twice.

Scanning, Metadata, and Formats That Last

• Metadata: Maryland State Archives, whose guidelines were updated in January 2025 and follow FADGI specifications, captures file type, file name, creator name, creation date, and record classification.⁴ The New York State Archives advises adding fields beyond the minimum based on actual access needs, not hypothetical ones.⁵
• Text accuracy: New York certifies OCR at 95 percent accuracy or better where searchable text is required.⁵ EPA notes that only human review and re-keying achieve full content-indexing accuracy, and recommends supplementing with cataloging.⁶
• Formats: Archival PDF/A with embedded text, plus structured exports such as CSV or XML per batch, keeps files usable across vendor changes.

Before You Scan, Dispose

Run the retention schedule first. Digitizing records already eligible for destruction converts a storage problem into a permanent discovery liability. For small offices, phase scanning by record series, join a shared services agreement with a county or regional body, or ask your state archives whether it runs a grant or contract imaging program for local governments.

Case Examples of Strong Public Records Portals

California agencies running online public records portals work from the same statutory clock: 10 days to decide whether responsive records exist, extendable by up to 14 more days in unusual circumstances. The portals below show how three agencies put that clock online. One caution up front: the available evidence comes from the agencies' own pages. It documents features and legal response standards, not audited outcomes, request volumes, median turnaround, or denial rates. No independent journalism or open-government review turned up in the research. Treat these as illustrative designs, not proven performers.

Three California Portals

• Orange County: Requests are filed electronically, and the requester is emailed when a response or record is available. The county states plainly that its 10-day determination is not a production deadline.¹ Records follow within a "reasonable time" after staff collect them, review exemptions, and possibly consult counsel. Putting that distinction in writing is the portal's clearest strength.
• California Department of Financial Protection and Innovation: The online portal receives requests instantly, avoiding the two to three business days that mail typically adds. The department says it strives to make non-exempt records available within its 10- or 24-day frame "whenever possible under the circumstances," which is a goal, not a guarantee.²
• California High-Speed Rail Authority: The authority aims to tell requesters within 10 days whether records will be provided. If unusual circumstances block a determination, it explains the delay and gives a determination date, with the extension capped at 14 days.³

What the Evidence Does Not Show

The sources reviewed do not describe public request logs, searchable posted responses, or fee transparency for these portals, so none of them should be credited with those features here. Any claim of faster responses or higher completion rates would also be unsupported. If a vendor or agency makes such a claim, flag it as self-reported until an auditor, newsroom, or open-government group confirms it.

Transferable Lessons for a Mid-Sized Office

• Intake: Accept requests electronically and send automatic notifications at each status change.
• Expectations: Tell requesters in plain language that a determination is not the same as production.
• Extensions: When you extend, give a date and a reason rather than silence.
• Evidence: Publish your own response-time and volume data. Without it, outside reviewers have nothing to evaluate, and your portal's reputation rests on assertion.

How Should a Record Move From Request to Release?

Use the full workflow for one-off requests, where the statutory response clock and the requester's scope drive each step. For proactive postings, run the same sequence once per record series, then reuse the approved redaction rules on every future batch so routine releases move faster without new legal review.

Balancing Transparency and Privacy: The Administrator's Role

If a record is already open for inspection at the counter, why does posting the same record online create new risk? Because scale changes everything. A paper file requires someone to show up, pay copy fees, and handle one record at a time. The same file on a public portal can be harvested continuously by automated scrapers, merged with other sources, and resold by data brokers into products the original disclosure statute never contemplated. Practical obscurity was a real, if accidental, privacy control, and digitization removes it.

What State Law Already Restricts

Several states have written specific personal-data carve-outs into their records statutes. Ohio Revised Code §149.43 shields a designated public service worker's residential address, Social Security number, residential and emergency telephone numbers, bank and credit-card numbers, and medical information.¹ Oregon Revised Statutes §192.377 requires redaction of residential addresses, telephone numbers, personal email addresses, personal cell numbers, Social Security numbers, and employer identification-card numbers submitted in confidence. Florida Statutes §119.0712 makes personal information in motor-vehicle records confidential consistent with the federal Driver's Privacy Protection Act of 1994.³ Texas treats a voter's Social Security number, driver's-license number, and personal-identification-card number as confidential, and its election address confidentiality program keeps an applicant's residence address, phone number, date of birth, emergency contact, and family-member information out of Public Information Act releases.⁴

More is pending. New Jersey bills introduced in 2026 (S553, S1941, and S1472) would require redaction of Social Security numbers, credit-card numbers, unlisted phone numbers, driver-license numbers, and home addresses of judicial and law-enforcement officers,⁶⁷ with one proposing a secure portal for covered persons to submit redaction requests.⁸ Hawaii's SB3015 would set a three-business-day acknowledgment window and a 30-day corrective action period.⁹ None of these is enacted, so track them rather than plan around them.

A Four-Question Decision Framework

• Legal requirement: Does a statute mandate disclosure, mandate redaction, or leave discretion?
• Public interest: Does release illuminate government conduct, or only expose a private individual?
• Privacy harm: What is the realistic risk of harassment, identity theft, or aggregation by third parties?
• Channel: Post proactively, release on request with redaction, or withhold with a written basis?

Liability and Career Value

Failed redaction is not a clerical slip. Wisconsin treats redaction as a partial denial reviewable by mandamus, and §19.36(6) requires releasing separable disclosable portions.⁵ Flattened PDFs, unscrubbed metadata, and portal misconfigurations create breach exposure. Administrators who can defend these calls in writing become genuinely hard to replace.

Building Records and Transparency Skills in Public Administration

Transparency work presents a recurring tension: release too much and you risk privacy harms, release too little and you erode public trust. Administrators who can manage that tension are increasingly valuable, not as technical archivists but as translators between legal obligations, technology constraints, and public expectations.

Skills the work demands

• Records law: FOIA, state public records acts, and their exemptions.
• Information governance: retention schedules, metadata, chain of custody, and disposal.
• Privacy risk assessment: spotting personal identifiers, health data, or security-sensitive details before release.
• Digital service design: building portals that are searchable, accessible, and usable by non-experts.

Where to build them and where they lead

MPA and MPP programs increasingly address MPA career skills through public law, information management, ethics, and digital government coursework. A specialization in records and transparency can lead to MPA career paths such as records officer, public information officer, city clerk, open government coordinator, or compliance analyst. These positions sit at the intersection of legal risk, technology, and public engagement.

Next steps

1. Pursue a recognized records management certification, such as the Certified Records Manager or a state archives credential. 2. Take a short course or continuing-education module on public records law and FOIA exemptions. 3. Compare MPA concentrations that include information governance or digital service design on the related degree pages at publicadministrationpolicy.org, and use the Careers in Public Administration & Policy pages to map local job titles and certification expectations.