DE 23-IB30 2023-11-08

Can a Delaware journalist FOIA a state employee's attendance, performance, and discipline records, and how generic can the agency's denial affidavit be?

Short answer: It depends on the type of record. Under Op. 06-IB11 and the personnel-file exemption (29 Del. C. § 10002(o)(1)), attendance and leave records with generic descriptors like 'sick' or 'vacation' are public, but performance and discipline records are not, the privacy interest outweighs accountability. The DHSS also lost on search adequacy because its FOIA-coordinator affidavit was too generic to satisfy Judicial Watch v. Univ. of Del.
Disclaimer: This is an official Delaware Attorney General opinion. AG opinions are persuasive authority but not binding precedent. This summary is for informational purposes only and is not legal advice. Consult a licensed Delaware attorney for advice on your specific situation.
About this page: The plain-English summary, reader guidance, and Q&A below were written by Ezel based on the official AG opinion. The original opinion (linked at the bottom of this page, or PDF in the sidebar) is the authoritative source for any reliance.
View original AG opinion (PDF)

Plain-English summary

AP reporter Randall Chase asked the Delaware Department of Health and Social Services (DHSS) for a wide range of records about a specific DHSS employee: communications, hiring documents, salary records, suspension and termination dates, schedules, and promotion/demotion history. After back-and-forth (and a paid search of 1,376 emails by the Department of Technology and Information that returned 278 responsive emails), DHSS produced redacted records and denied the rest.

The AG made several distinct rulings:

  1. Search adequacy: violation found. DHSS's FOIA-coordinator affidavit said "no responsive records" exist for several categories (employment start, job titles, salary, promotion/demotion history, hiring decision records, criminal-offender employment policies). But the affidavit gave no description of what searches were conducted, who was consulted, or why the FOIA coordinator had personal knowledge. Judicial Watch v. Univ. of Del., 267 A.3d 996 (Del. 2021), and follow-up cases require under-oath specificity. Generic affidavits do not satisfy § 10005(c).
  2. Attendance and leave records: violation found, must produce. Op. 06-IB11 controls. Attendance records with generic descriptors ("vacation," "sick," "personal day") are public. The agency may redact specific medical conditions or treatment details under the Health Care Privacy Act, but cannot withhold the whole record. Merit Rule 16.1 (which makes master personnel records confidential and threatens dismissal for unauthorized disclosure) does not function as a FOIA exemption.
  3. Performance and discipline records: properly withheld. These fall within the personnel-file exemption in § 10002(o)(1), which exempts "personnel, medical, or pupil files" whose disclosure would invade personal privacy. Delaware's common-law right of privacy is balanced against the public interest in government accountability; the AG concluded the balance favors the employee on these specific record types.
  4. Reason-for-denial specificity: not a violation here. § 10003(h)(2) requires the agency to "indicate the reasons for the denial." DHSS cited the statutory exemptions in its responses and explained more in its petition response. That meets the minimum, but the AG noted "we encourage" agencies to be more specific upfront.

The AG recommended DHSS produce attendance and leave records (with permissible health-condition redactions) and supplement its search for the categories where the affidavit was too generic.

What this means for you

If you are a journalist or watchdog FOIA-ing state employee records

You can typically get:

  • Attendance and leave records (with generic descriptors: "vacation," "sick," "personal day").
  • Salary information (a separate well-established public record).
  • Date of hire, date of separation, job title, and other position-status data, when available.
  • Email and other communications about non-private agency business.

You typically cannot get:

  • Performance reviews and evaluations.
  • Discipline records, suspensions, written warnings, internal investigations.
  • Specific medical conditions or treatments referenced in leave documentation.
  • Master personnel file documents covered by the personnel-file exemption.

If the agency cites Merit Rule 16.1 to withhold attendance records, push back. The AG has held that Merit Rule 16.1 is not a FOIA exemption.

If you handle FOIA for a Delaware state agency

Two operational lessons:

  1. Affidavits must be specific. Identify what was searched, who was consulted, when, and what was found. Judicial Watch requires this level of detail. A FOIA coordinator's generic "no responsive records" attestation no longer suffices.
  2. Separate the categories of personnel records. Attendance/leave is a distinct category from performance/discipline. Reflexively withholding everything in the personnel file invites a partial loss at the AG.

If you are a Delaware state employee

The personnel-file exemption protects your performance reviews, discipline records, and specific medical information from public disclosure. It does not protect your attendance/leave records (in their generic form), your salary, your job title, or your work schedule. Plan accordingly.

If you are an attorney advising a public body

The post-Judicial Watch affidavit standard is specific enough that conclusory affidavits regularly fail. Train FOIA coordinators to write affidavits that survive scrutiny:

  • Identify the search terms used.
  • Identify the custodians and systems searched.
  • Identify the date range searched.
  • Document any responsive-records review and the basis for any withholdings.
  • Have the affiant attest to the basis for personal knowledge.

Common questions

Q: Why are attendance records public but discipline records not?
A: The AG has long held (Op. 06-IB11) that the public has a legitimate interest in knowing when public employees are on the clock. Attendance with generic descriptors does not invade privacy. Discipline records, by contrast, expose conduct evaluation that the personnel exception specifically protects.

Q: Can the agency redact medical specifics in leave records?
A: Yes. The Delaware Health Care Privacy Act protects specific medical conditions, treatments, and providers. The agency releases the date and a generic descriptor ("sick leave," "doctor's appointment") and redacts the rest.

Q: Is Merit Rule 16.1 a FOIA exemption?
A: No. Merit Rule 16.1 governs internal HR conduct (and sets dismissal as a sanction for unauthorized disclosure), but it is not a statute or common-law privilege. Section 10002(o)(6) exempts records exempt by statute or common law; Merit Rules are agency-level rules and do not qualify.

Q: What is the affidavit standard after Judicial Watch?
A: The agency must "state, under oath, the efforts taken to determine whether there are responsive records and the results of those efforts" (267 A.3d at 1012). A 2022 Superior Court decision (2022 WL 2037923) confirmed that "generalized statements" do not meet the burden.

Q: Can an agency redact email addresses of public employees?
A: Generally no, because internal work email addresses are not private. Personal email addresses, home addresses, and personal phone numbers can be redacted; work email is part of the public-records footprint.

Q: How does this opinion interact with the Delaware Whistleblower statutes?
A: Whistleblower protections are separate. They do not affect what records are public versus exempt under FOIA. They do affect what conduct an employee can take without retaliation.

Q: What if my FOIA request asked broadly for "all communications" about an employee?
A: The agency searches; non-personal-file responsive records (like agency emails about scheduling, project assignments, or routine correspondence) are likely public. Records that became part of the personnel file are usually exempt.

Q: What about salary records and pension records?
A: Salary records are public. Pension records depend on the type, retiree-name lists are sometimes treated more cautiously (Op. 01-IB17 declined disclosure of retiree home addresses).

Background and statutory framework

Delaware FOIA's personnel exemption sits at § 10002(o)(1): "[a]ny personnel, medical or pupil file, the disclosure of which would constitute an invasion of personal privacy, under this legislation or under any State or federal law as it relates to personal privacy."

The AG's working definition of a "personnel file" comes from Op. 02-IB24: "a file containing information that would, under ordinary circumstances, be used in deciding whether an individual should be promoted, demoted, given a raise, transferred, reassigned, dismissed, or subject to such other traditional personnel actions."

The Delaware common-law right of privacy comes from Barbieri v. News-Journal Co., 189 A.2d 773 (Del. 1963) ("the right to be let alone"). It is not absolute. Op. 13-IB03 and Op. 13-IB06 hold that "legitimate privacy claims under Delaware common law must be balanced against the competing need for access to information to further the accountability of government."

Op. 06-IB11 sits at the heart of the attendance-records question. It applied the privacy-versus-accountability balance to attendance and leave records and concluded "[j]ust as the public has a right to know the salary paid to public employees, the public also has a right to know when their public employees are and are not performing the duties for which they are paid."

The Health Care Privacy Act layers on top of FOIA, providing a separate protection for specific medical information that survives even when the underlying record is otherwise releasable.

Citations and references

Statutes:
- 29 Del. C. § 10002 (Public records definitions and exemptions)
- 29 Del. C. § 10003 (Access; reasons for denial)
- 29 Del. C. § 10004 (Open meetings; personnel exception)
- 29 Del. C. § 10005 (Enforcement; burden of proof)

Cases:
- Judicial Watch, Inc. v. Univ. of Del., 267 A.3d 996 (Del. 2021), affidavit specificity requirement
- Judicial Watch, Inc. v. Univ. of Del., 2022 WL 2037923 (Del. Super. June 7, 2022), generalized affidavits insufficient
- Barbieri v. News-Journal Co., 189 A.2d 773 (Del. 1963), common-law right of privacy
- Guthridge v. Pen-Mod, Inc., 239 A.2d 709 (Del. Super. 1967), privacy not absolute

Prior AG opinions:
- Del. Op. Att'y Gen. 02-IB12 (May 21, 2002), personnel exception balance
- Del. Op. Att'y Gen. 02-IB24 (Oct. 1, 2002), personnel-file definition
- Del. Op. Att'y Gen. 06-IB11 (May 31, 2006), attendance and leave records public
- Del. Op. Att'y Gen. 13-IB03 (July 12, 2013), privacy-versus-accountability balance
- Del. Op. Att'y Gen. 13-IB06 (Nov. 20, 2013), same

Source

Original opinion text

PRINT VERSION: Attorney General Opinion No. 23-IB30

OFFICE OF THE ATTORNEY GENERAL OF THE STATE OF DELAWARE

Attorney General Opinion No. 23-IB30

November 8, 2023

VIA EMAIL

Randall Chase
Associated Press
[email protected]

RE: FOIA Petition Regarding the Delaware Department of Health and Social Services

Dear Mr. Chase:

We write regarding your correspondence alleging that the Delaware Department of Health and Social Services ("DHSS") violated the Delaware Freedom of Information Act, 29 Del. C. §§ 10001-10008 ("FOIA"). We treat your correspondence as a Petition for a determination pursuant to 29 Del. C. § 10005 regarding whether a violation of FOIA has occurred or is about to occur. For the reasons set forth below, we conclude that the DHSS violated FOIA by failing to meet its burden of demonstrating that it appropriately searched for responsive records and by denying access to the employee's attendance and leave records. It is recommended that the DHSS, after appropriate redactions, disclose the employee's attendance and leave records. The DHSS did not violate FOIA by denying access to the performance and discipline records under the personnel file exemption or by its assertion of Section 10002(o)(6) without elaboration in its denial letter.

BACKGROUND

On May 8, 2023, you submitted a FOIA request to the DHSS seeking various employment records related to a DHSS employee:

Pursuant to the Freedom of Information Act, 29 Del. Code 100, I am requesting copies from the Department of Health and Social Services of all internal and external emails, texts, faxes, phone logs, memos, contracts, memoranda, faxes, online messages and any and all other correspondence in any form related to the hiring, employment, supervision, and termination of [a DHSS employee]. The records I am seeking include but are not limited to his employment start, suspension and termination dates, his job titles, his salary and pay information, his weekly work schedules, and his promotion/demotion history. . . .

The DHSS initially denied this request, but you then provided names of the employees whose email accounts would be searched and the search terms on May 17, 2023. For this new request, the DHSS provided you a cost estimate associated with the email search by the Delaware Department of Technology and Information ("DTI"), and the DTI confirmed that you paid the fee on June 30, 2023. The DHSS asserted additional time would be needed on two occasions and after you filed an initial petition, provided a response on July 14, 2023 with the responsive, redacted records. This response also denied the request under the exemptions in 29 Del. C. § 10002(o)(1) for personnel, medical, or pupil files, the disclosure of which would constitute an invasion of personal privacy, under FOIA or under any State or federal law as it relates to personal privacy and 29 Del. C. § 10002(o)(6) for any records specifically exempted from disclosure by statute or common law. That initial petition was closed. However, after reviewing the records provided, you filed this new Petition.

In this Petition, you allege that the DHSS's search returned 1,376 emails and yet the DHSS only provided redacted pages of what appear to be internal communications and an unsworn assertion that everything else, including hiring documents and all the 1,376 emails, are exempt from disclosure. You allege that the right of privacy is not absolute but should be qualified by the need for access by the circumstances and the rights of others, and under FOIA, you believe privacy rights should be balanced against the need for access to information to further the accountability of government.

The DHSS, through its legal counsel, replied to the Petition, enclosing the affidavit of its FOIA coordinator in support of its response. The DHSS identifies three categories of requested records and notes that although the DTI search returned 1,376 emails, only 278 emails were determined to be responsive to the request. The DHSS states that the first category of records consist of records related to the hiring, employment, supervision, and termination of the employee, including employment start, suspensions and termination dates, job titles, salary and pay information, weekly work schedules, and promotion/demotion history. The DHSS FOIA coordinator attests that on October 13, 2023, the DHSS produced the employee's weekly work schedule. The DHSS FOIA coordinator swears that the DHSS has no responsive records related to the "(i) employment start; (ii) job titles; (iii) salary and pay information; and (iv) promotion/demotion history." The DHSS FOIA coordinator attests that the DHSS has no responsive records for the other two categories of records: 1) records relating to the DHSS's decision to hire this employee and knowledge obtained through a background check; and 2) records of any contracts, programs, or policies regarding the employment of criminal offenders, referring you to the Delaware Department of Human Resources for those records.

The DHSS also asserts that the records withheld under Section 10002(o)(6) are the attendance and leave records, performance records, and discipline records. The DHSS contends that these records are exempt pursuant to the State of Delaware Employee Merit Rule 16.1, which provides a "master personnel record for each employee" which includes "applications for employment, each Human Resources transaction, attendance and leave records, employee performance review documents, grievance records, . . . and any other records or information considered appropriate" is considered confidential and "[u]nauthorized disclosure of any portion of a State employee's records shall be grounds for dismissal." The DHSS FOIA coordinator attests that this employee is subject to the Merit System. The DHSS also argues that the employee's leave and discipline records are protected from disclosure under the Health Care Privacy Act, as the responsive leave and medical records may disclose an employee's medical condition. In addition, the DHSS's counsel asserts that the responsive records identified by the DHSS are also exempt under the attorney-client privilege and the common law right of privacy. In support of these statements, the DHSS FOIA coordinator swears that the "responsive leave and discipline records contain information directly relating to [the employee's] physical or mental health status, condition and treatment, and specific information about [the employee's] medical condition," and "certain responsive emails also reflect communications between the DHSS and its counsel seeking and providing legal advice."

The DHSS also argues that its assertion of the personnel file exemption under Section 10002(o)(1) is appropriate and the attendance and leave, performance, and discipline records are part of the personnel file. These records, the DHSS argues, are subject to privacy considerations "and claims of [the employee] as to the information that would be disclosed through the responsive records outweighs the competing need for access to the information for government accountability and transparency."

DISCUSSION

The public body bears the burden of proof to justify its denial of access to records and to otherwise demonstrate its compliance with the FOIA statute. The Judicial Watch, Inc. v. University of Delaware case provides that Section 10005(c) "requires a public body to establish facts on the record that justify its denial of a FOIA request." "[U]nless it is clear on the face of the request that the demanded records are not subject to FOIA, to meet the burden of proof under Section 10005(c), a public body must state, under oath, the efforts taken to determine whether there are responsive records and the results of those efforts." However, generalized assertions in the affidavit will not meet the burden. For example, the Superior Court of Delaware determined that an affidavit outlining that legal counsel inquired about several issues, without indicating who was consulted, when the inquiries were made, and what, if any documents, were reviewed, was too generalized to meet this standard. Similarly, we determine that the numerous sworn statements in the FOIA coordinator's affidavit that the DHSS has "no responsive records" for the employment start date, job titles, salary and pay information, promotion/demotion history, "records related to the decision by [the] DHSS to hire [this employee]," certain information obtained through a background check, and "contracts, agreements, programs, or policies regarding employment of criminal offenders" are insufficient. The FOIA coordinator swears that in any earlier email, she stated that any other responsive records are not public records pursuant to 29 Del. C. § 10002)(o)(1) and (6).

This affidavit does not provide the basis for the DHSS FOIA coordinator's personal knowledge to attest to these matters under oath, nor does it provide specific sworn testimony regarding whether the DHSS FOIA coordinator made any efforts, and the results of those efforts, to determine whether there are responsive records. As such, we determine that the DHSS has not met its burden of demonstrating it does not have these responsive records. It is recommended that the DHSS, in compliance with the timeframes set forth in Section 10003, supplement its response to your request to address these issues, and if applicable, provide any additional public records.

The DHSS acknowledges, under oath, that it has the employee's weekly work schedule, attendance and leave records, performance records, and discipline records. The DHSS FOIA coordinator attests the DHSS provided weekly schedules to you. As the remaining records were used by the DHSS in determining personnel actions to be taken against the employee, the DHSS claims that these records are exempt pursuant to the personnel file exemption. With the exception of the attendance and leave records, we agree.

The personnel file exemption permits nondisclosure of "[a]ny personnel, medical or pupil file, the disclosure of which would constitute an invasion of personal privacy, under this legislation or under any State or federal law as it relates to personal privacy." This Office has determined that a personnel file "has as one of its principal purposes the furnishing of information for making personnel decisions regarding the individual involved." The personnel file is defined as "a file containing information that would, under ordinary circumstances, be used in deciding whether an individual should be promoted, demoted, given a raise, transferred, reassigned, dismissed, or subject to such other traditional personnel actions." In this case, we find that the attendance and leave records, performance records, and discipline records all are personnel file records.

To be exempt, the disclosure of such personnel records must also constitute an invasion of personal privacy. This Office has determined that attendance and leave records with the names, dates, and generic descriptors like "vacation," "sick," or "personal day" do not constitute an invasion of personal privacy and are not exempt under FOIA. Further, although the specific medical condition, course of treatment, or doctor's name would be appropriately redacted under the Health Care Privacy Act, an attendance sheet indicating "sick leave" or a "doctor's appointment" is not protected information. Thus, as the leave and attendance records are, by the FOIA statute, authorized public records, release of these records is consistent with Merit Rule 16. Accordingly, we find that the attendance and leave records are not exempt and are recommended for disclosure, but the specific physical or mental health status, condition and treatment, and specific information about the employee's medical condition may be redacted, in addition to any other exempt information on these records.

The remaining records, consisting of the performance and disciplinary records, fall squarely within the personnel file exemption, as releasing such records would be an invasion of personal privacy. The Delaware Supreme Court has recognized a common law right of privacy, or as it has been described, "the right to be let alone." However, this right is not absolute. Rather, it is "qualified by the circumstances and also by the rights of others." In the FOIA context, "we have determined that legitimate privacy claims under Delaware common law must be balanced against the competing need for access to information to further the accountability of government." "When legitimate privacy rights are implicated under FOIA, we must balance those rights against the competing need for access to information to further FOIA's primary goals — government transparency and accountability." The employee's privacy interest in keeping job performance and discipline private is significant. Balancing the public interest in this employee's job performance and discipline records against the employee's privacy interest in such matters, we believe that the balance tips in favor of the employee's privacy and find that these records are not public records under FOIA.

Finally, the Petition claims that the DHSS's initial response to the request that did not specify the common law or statute that exempted the records from disclosure constitutes a violation of FOIA. Section 10003 requires the public body's response to indicate the reasons for the denial. The DHSS cited to the specific language of 29 Del. C. § 10002(o)(6) without further elaboration but explained those bases for its denial more specifically in its Response to this Petition. Although we encourage the DHSS to provide more specific grounds, we determine that in these circumstances, the DHSS's response to the request meets the minimum requirement under FOIA.

CONCLUSION

For the foregoing reasons, we determine that the DHSS violated FOIA by failing to meet its burden of demonstrating that it appropriately searched for responsive records and by denying access to the employee's attendance and leave records. It is recommended that the DHSS, after appropriate redactions, disclose the employee's attendance and leave records. The DHSS did not violate FOIA by denying access to the performance and discipline records in its custody under the personnel file exemption or by its assertion of Section 10002(o)(6) without elaboration in its denial letter.

Very truly yours,

/s/ Alexander S. Mackler

Alexander S. Mackler

Chief Deputy Attorney General

cc: Stephen M. Ferguson, Deputy Attorney General

Dorey L. Cole, Deputy Attorney General