Court Opinion

ID: 5119148
Source: CourtListenerOpinion
Date Created: 2021-10-18 22:01:03.444803+00
Date Added: 2024-06-11T08:22:11.318622
License: Public Domain

UNITED STATES DISTRICT COURT
                            FOR THE DISTRICT OF COLUMBIA

 THE REPORTERS COMMITTEE FOR
 FREEDOM OF THE PRESS,

                       Plaintiff,
                                                    Case No. 1:18-cv-00155 (TNM)
                       v.

 UNITED STATES CUSTOMS AND
 BORDER PROTECTION, et al.,

                       Defendants.

                                    MEMORANDUM OPINION

       This case arises at the thorny intersection of government and social media. In 2017, U.S.

Customs and Border Protection (“CBP”) directed Twitter to divulge details about a user who

criticized CBP’s policies. The agency relied on 19 U.S.C. § 1509, a provision that allows CBP

to summon anyone who has improperly exported or imported merchandise in the United States.

Unsurprisingly, Twitter objected. Amid the public outcry that followed, CBP backed down.

       Alarmed at CBP’s actions, Reporters Committee for Freedom of the Press (“the

Committee”) submitted multiple requests under the Freedom of Information Act (“FOIA”) for

records related to CBP’s interactions with Twitter. The agency’s search for responsive records

yielded thousands of pages. But the agency withheld or redacted many of those pages.

       Now, over four years after the actions that spawned those requests, the Committee

challenges CBP’s response. The matter is before the Court on cross-motions for summary

judgment. Both motions will be granted in part and denied in part.
                                               I.

       In March 2017, CBP’s Office of Professional Responsibility (OPR) issued a summons to

Twitter under authority allegedly provided by 19 U.S.C. § 1509. See Fourth Declaration of

Patrick Howard ¶¶ 11–13 (“Howard 4th Decl.”), ECF No. 59-3; Defendants’ Statement of

Material Facts ¶ 3, ECF No. 59-2. CBP requested “all records,” including the “user name[],

account login, phone numbers, mailing addresses, and IP addresses” for the user behind the

Twitter account @ALT_uscis, which had been critical of CBP policies. Compl. Ex. C at 10,

ECF No. 1-3 (copy of CBP summons to Twitter). 1 Special Agent in Charge Stephen Caruso

signed the summons, which ordered Twitter to “appear” before Special Agent Adam Hoffman.

Id.

       Twitter sued one month later, arguing that the summons exceeded CBP’s authority and

violated Twitter’s First Amendment right. See Howard 4th Decl. ¶ 14. CBP withdrew the

summons the next day, mooting the case, if not the controversy. See id. ¶ 15.

       Soon after, the Committee filed a FOIA request for agency records related to the

@ALT_uscis Twitter account and the Twitter summons generally. See Compl. Ex. D at 3, ECF

No. 1-4. The agency began to search for documents responsive to the Committee’s request.

While that search progressed, the Department of Homeland Security’s (“DHS”) Inspector

General released a report detailing his investigation into the imbroglio. See Compl. Ex. B, ECF

No. 1-2. He concluded that CBP “may have exceeded the scope of its authority under Section

1509,” which “addresses ascertainment, collection, and recovery of customs duties.” Id. at 4–5

(emphasis in original).

1
  All page citations refer to the pagination generated by the Court’s CM/ECF system and all
exhibit numbers refer to the numbered attachments to the CM/ECF filings.

                                               2
       By January 2018, CBP had produced no records in response to the Committee’s FOIA

request. Dissatisfied with that lack of response, the Committee sued the agency (along with

DHS), seeking to compel production of responsive records. See Compl., ECF No. 1. Two

months later, the Committee filed a second FOIA request for all “processing notes” and “email

communications” about how CBP had addressed the Committee’s first request. See Howard 4th

Decl. ¶ 26. The Committee then filed a third FOIA request for any agency records that

referenced 19 U.S.C. § 1509. See id. ¶ 29. When CBP failed to respond to the two most recent

FOIA requests, the Committee filed another lawsuit. See Compl., Civil Action No. 18-cv-1289.

The Court consolidated the two lawsuits. See Minute Entry, June 12, 2018.

       From April 2018 to December 2019, the agency released 4,151 pages of records to the

Committee in 19 responses. See Howard 4th Decl. ¶ 35. CBP listed all produced documents in a

Vaughn Index. See Howard 4th Decl., Ex. A, ECF No. 43-2. According to that Index, some

released pages contained information that was exempt from FOIA’s prohibitions. For those

documents, the agency released only the non-exempt information.

       Each party then moved for summary judgment. The Government argued that it had

properly responded to the Committee’s requests. See Motion for Summary Judgment, ECF No.

43. The Committee argued the opposite. See Cross-Motion for Summary Judgment, ECF No.

45. The Court denied both motions, holding that the agency’s Vaughn Index and accompanying

declarations were so “plainly inadequate” that the Court could not “meaningfully review” the

record. Order at 2–3, ECF No. 52. The Court ordered the agency to submit a new Index before

further summary-judgment briefing could occur. See id. at 3. After the Court’s order, CBP

consulted with the Committee and released 127 pages with revised redactions. See Pl.’s

Statement of Material Facts ¶ 50, ECF No. 60-2.

                                               3
         The parties then cross-moved for summary judgment. See Defendants’ Motion for

Summary Judgment, ECF No. 59 (“Defs.’ MSJ”); Plaintiff’s Cross-Motion for Summary

Judgment, ECF No. 60 (“Pl.’s MSJ”). Those motions are now before the Court. 2

                                                 II.

         To prevail on a motion for summary judgment, a party must show that “there is no

genuine dispute as to any material fact.” Fed. R. Civ. P. 56(a). FOIA requires “disclosure of

documents held by a federal agency unless the documents fall within one of nine enumerated

exemptions, which are listed at 5 U.S.C. § 552(b).” U.S. Fish & Wildlife Serv. v. Sierra Club,

Inc., 141 S. Ct. 777, 785 (2021). To obtain summary judgment, the agency bears the burden to

show the applicability of the claimed exemptions. See ACLU v. DOD, 628 F.3d 612, 619 (D.C.

Cir. 2011). Courts construe these exemptions narrowly. See Milner v. Dep’t of the Navy, 562

U.S. 562, 565 (2011). Courts review the applicability of FOIA exemptions de novo. See King v.

DOJ, 830 F.2d 210, 217 (D.C. Cir. 1987).

         To meet its burden, an agency may rely on declarations describing the applicability of a

FOIA exemption to information that the agency has withheld. See Shapiro v. DOJ, 893 F.3d

796, 799 (D.C. Cir. 2018). Those declarations receive “a presumption of good faith.” SafeCard

Servs., Inc. v. SEC, 926 F.2d 1197, 1200 (D.C. Cir. 1991). The Court may grant summary

judgment based solely on the agency’s declarations if they are not contradicted by contrary

record evidence or by evidence of the agency’s bad faith. See Aguiar v. DEA, 865 F.3d 730,

734–35 (D.C. Cir. 2017).

         Here, CBP cited three of FOIA’s nine exemptions to justify withholdings. See generally

Howard 4th Decl., Ex. A, ECF No. 59-4 (“Vaughn Index”). Exemption 5 allows nondisclosure

2
    The Court has jurisdiction under 5 U.S.C. § 552(a)(4)(B) and 28 U.S.C. § 1331.

                                                 4
of records “that would not be available by law to a party other than an agency in litigation with

the agency.” 5 U.S.C. § 552(b)(5). Put simply, a FOIA requester cannot obtain by FOIA what

the requester could not obtain in a lawsuit against the agency. See NLRB v. Sears, Roebuck &

Co., 421 U.S. 132, 149 (1975). Thus, documents protected under (as relevant here) the

deliberative process privilege, the attorney-client privilege, and the attorney work-product

privilege in civil litigation may be withheld under FOIA. See Sierra Club, 141 S. Ct. at 785.

       CBP also withheld information under Exemptions 6 and 7(C), which cover information

that, if disclosed, might threaten personal privacy. See 5 U.S.C. § 552(b)(6), (b)(7)(C). Lastly,

CBP withheld information under Exemption 7(E), which protects information that, if disclosed,

would divulge techniques, procedures, or guidelines for law enforcement investigations or

prosecutions. See id. § 552(b)(7)(E).

       Whether an exemption applies, however, does not end the matter. Under a 2016

amendment to FOIA, an agency may not withhold exempt materials unless the agency

“reasonably foresees that disclosure would harm an interest protected by” a FOIA exemption. 5

U.S.C. § 552(a)(8)(A)(i)(I). Early decisions in this district construing this language held that, to

meet the foreseeable-harm standard, the agency must articulate a link between the withheld

information and the foreseen harm. See, e.g., Jud. Watch, Inc. v. Dep’t of Com., 375 F. Supp. 3d

93, 100 (D.D.C. 2019). How specific an agency’s explanation needed to be, however, remained

a somewhat open question, particularly in decisions that involved the deliberative process

privilege under Exemption 5.

       Two recent cases from the D.C. Circuit elucidate how courts should deal with the

foreseeable harm requirement. In Machado Amadis v. Department of State, 971 F.3d 364, 370

(D.C. Cir. 2020), the agency withheld under the deliberative process privilege some

                                                  5
recommendations, discussion, and search notes about FOIA processing. The court upheld the

applicability of the privilege to the information. See id. The court also held that the agency had

met the foreseeable harm requirement. The agency’s declaration said that disclosure of the

forms would discourage candid discussions among line attorneys, thereby hindering “the

forthright internal discussions necessary for efficient and proper adjudication of administrative

appeals.” Id. at 371 (quoting agency declaration). The court rejected the plaintiff’s

counterargument that the agency had provided only “generalized assertions that ‘could’ chill

deliberations.” Id. (quoting plaintiff’s brief). According to the court, the agency instead had

“specifically focused on the information at issue” in the forms and had “concluded that

disclosure of that information ‘would’ chill future discussions.” Id. (quoting agency

declaration). Thus, the agency permissibly withheld the privileged information.

       The D.C. Circuit returned to the foreseeable harm requirement in Reporters Committee

for Freedom of the Press v. FBI, 3 F.4th 350 (D.C. Cir. 2021). There, the Committee submitted

multiple FOIA requests for records about FBI agents impersonating reporters. The FBI withheld

a bevy of information under the deliberative process privilege, including emails between

Director Comey and agency officials on a public editorial written by Comey about the incident.

See id. at 360-61. The Committee challenged those withholdings.

       The court first concluded that the privilege did not apply to some withheld information.

For the information that was privileged, the court then turned to the foreseeable harm

requirement. The FBI’s main declaration (the Hardy Declaration) said that disclosing the

material “would have an inhibiting effect upon agency decisionmaking” because disclosure

“would chill full and frank discussions” inside the agency. Id. at 370. The FBI worried that

decisionmakers would be “less candid and more circumspect in expressing their thoughts.” Id.

                                                 6
The court rejected this explanation as insufficient because the FBI had merely “mouth[ed] the

generic rationale for the deliberative process privilege itself.” Id. The FBI had not given a

“focused and concrete” explanation for why disclosure of the particular information would, “in

the specific context of the agency action at issue, actually impede those same agency

deliberations moving forward.” Id. Instead, the agency had submitted a “perfunctory statement”

that disclosure “would jeopardize the free exchange of information” between decisionmakers.

Id. The agency’s failure to show a foreseeable harm required disclosure of a draft Inspector

General report, even though the deliberative process privilege covered that report. See id. at 371.

       The court reached a different conclusion about the emails involving Director Comey and

emails between FBI attorneys and personnel about the agency’s undercover investigations

policy. Although the Hardy Declaration’s insufficient explanation applied to these records, the

court noted that both sets of emails discussed “sensitive undercover operations in the midst of a

policy crisis.” Id. As the court said, “the sensitivity of the context in which these conversations

arose as well as their subject matter . . . provide the particularized context for a finding of

foreseeable harm.” Id

       After Amadis and Reporters Committee, agencies must make two showings. First, the

agency must, as always, show that a FOIA exemption applies to withheld information. See Jud.

Watch, Inc. v. Dep’t of Treasury, 802 F. Supp. 2d 185, 193 (D.D.C. 2011). Second, the agency

must articulate, in a “focused and concrete” way, the harm that would result from disclosure,

including the basis and likelihood of that harm. Reporters Comm., 3 F.4th at 369. But even

without a sufficient explanation from the agency, the “context and purpose” of withheld

information can support a finding of foreseeable harm. Id. at 372. An agency’s failure to make

both showings warrants disclosure. See Ctr. for Investigative Reporting v. CBP, 436 F. Supp. 3d

                                                   7
90, 106 (D.D.C. 2019) (“In sum, FOIA now requires that an agency release a record—even if it

falls within a FOIA exemption—if releasing the record would not reasonably harm an

exemption-protected interest and if its disclosure is not prohibited by law.”) (cleaned up).

                                                III.

                                                A.

       CBP withheld seven categories of documents under Exemption 5. See Howard 4th Decl.

¶¶ 43–52. As described above, Exemption 5 protects from disclosure any “inter-agency or intra-

agency memorandums or letters that would not be available by law to a party other than an

agency in litigation with the agency.” 5 U.S.C. § 552(b)(5). CBP withheld information under

the deliberative process privilege, the attorney-client privilege, and the attorney work-product

privilege.

       The deliberative process privilege shields from disclosure the advisory opinions,

recommendations, and deliberations that comprise some part of a process through which the

agency formulates decisions and policies. See NLRB, 421 U.S. at 150. Documents that embody

a final decision, however, are not protected by this privilege “because once a decision has been

made, the deliberations are done.” Sierra Club, 141 S. Ct. at 785.

       Thus, documents must be predecisional and deliberative before they can be exempt from

disclosure. See id. at 786. A document is predecisional when generated before the agency’s

final decision on the matter to which the document relates. See id.; see also Coastal States Gas

Corp. v. Dep’t of Energy, 617 F.2d 854, 866 (D.C. Cir. 1980) (predecisional documents are

“generated before the adoptions of an agency policy”). A document is deliberative if the

document was prepared as “part of the agency give-and-take—of the deliberative process—by

which” the agency made the decision. Vaughn v. Rosen, 523 F.2d 1136, 1144 (D.C. Cir. 1975).

                                                 8
       The attorney-client privilege encourages clients “to be as open and honest as possible

with attorneys.” Coastal States, 617 F.2d at 862. The privilege “is not limited to

communications made in the context of litigation or even a specific dispute, but extends to all

situations in which an attorney’s counsel is sought on a legal matter.” Id. In the governmental

context, “the client may be the agency and the attorney may be an agency lawyer.” Tax Analysts

v. IRS, 117 F.3d 607, 618 (D.C. Cir. 1997). Confidentiality is a “fundamental prerequisite” of

this privilege, and therefore confidentiality must exist both “at the time of the communication

and [be] maintained” after the communication has been made. Coastal States, 617 F.2d at 863.

       The attorney work-product privilege “provides a working attorney with a ‘zone of

privacy’ within which to think, plan, weigh facts and evidence, candidly evaluate a client’s case,

and prepare legal theories.” Id. at 864. Thus, FOIA exempts from disclosure materials prepared

by an attorney in anticipation of litigation. See Nat’l Ass’n of Crim. Def. Lawyers v. DOJ Exec.

Off. for U.S. Attys., 844 F.3d 246, 250–51 (D.C. Cir. 2016).

       With those standards in mind, the Court addresses in turn each of the seven withheld

categories.

                                                1.

       Based on CBP’s declarations, Category 1 covers emails “about the issuance of the 19

U.S.C. § 1509 summons,” including “discussions about how to respond to Twitter’s refusal to

comply with the summons.” Howard 4th Decl. ¶ 46. Although the Government offers little on

this point, CBP employees presumably sent emails “about the issuance” of the summons both

before and after the agency sent the summons to Twitter. In fact, the Government’s Index lists

as withheld several emails from before the issuance of the summons. See, e.g., Vaughn Index at

36–37 (entries from February 2017, one month before the summons, for emails “regarding the

                                                9
Twitter summons and the Twitter lawsuit”). Discussions on how the agency should respond to

Twitter’s refusal to comply obviously occurred after issuance of the summons.

       The Court agrees with the Government that the documents in Category 1 fall within the

deliberative process privilege. Emails sent before the decision to issue a summons were, by

definition, predecisional. See, e.g., Senate of the Cmnwlth of Puerto Rico v. DOJ, 823 F.2d 574,

585 (D.C. Cir. 1987). And the Committee does not contest the Government’s declaration that

those emails “reflect[] internal agency deliberation about” the decision to issue a summons and

thus formed a part of the agency’s deliberative process. Defs.’ MSJ at 17. The pre-issuance

emails therefore are exempt from disclosure under the deliberative process privilege.

       The privilege likewise covers the post-issuance emails. CBP employees sent those before

the agency decided to withdraw the summons—making them predecisional to the withdrawal.

And the Committee again does not contest the Government’s statement that those emails “reflect

the agency’s internal deliberative process” about whether to withdraw the summons. Id.

       Separate from CBP’s explanation, however, the Committee challenges the nondisclosure

of some specific documents that the Court believes should be part of this category. 3

       The Committee challenges the nondisclosure in full of six pages from a PowerPoint

presentation titled “Use of the Customs Summons in Trade Enforcement Cases 19 U.S.C.

§ 1509,” which was emailed as part of an invitation to a training series for CBP employees. See

Second Declaration of Katie Townsend (“Townsend 2nd Decl.”), Ex. C at 84, 104, 106–09, ECF

No. 60-6. The Government has not justified withholding this. The Vaughn Index says that the

3
  Perhaps because of the large size of the Vaughn Index, the Government does not specify which
documents withheld under Exemption 5 fall into which of the seven categories. But the specific
records mentioned here aptly fit the category’s description: all are “emailed communications
between CBP employees” about the issuance of the summons and the “proper use” of the § 1509
authority. Howard 4th Decl. ¶ 46.

                                                10
agency applied Exemption 5 to “discussions within the presentation on matters of policy

regarding the enforcement of summonses.” Vaughn Index at 91 (entry for FOIA003573–

003607).

       That explanation fails to show how the presentation could be predecisional. No record

evidence supports that the presentation factored into the decision to issue or withdraw the Twitter

summons. In fact, the presentation only appears in the record as an attachment to a May 2, 2017

email, one month after CBP withdrew the summons. See Townsend 2nd Decl., Ex. C at 79.

CBP identifies no other later decision to which the presentation relates. See Abtew v. DHS, 808

F.3d 895, 899 (D.C. Cir. 2015) (“A document is predecisional if it precedes, in temporal

sequence, the decision to which it relates.”) CBP therefore has not shown that the redacted

material in the presentation meets the requirements for the deliberative process privilege. Thus,

CBP must disclose those six pages in full.

       The same analysis largely applies for the next document sought by the Committee. The

agency withheld a portion of an email that contained “an investigative report regarding the

emails released on Twitter.” Vaughn Index at 25 (entry for FOIA00376–00379). The

Committee correctly argues that this withheld report was not predecisional. The agency fails to

show, much less contend, that the report related to a decision that came later. The decision to

withdraw the summons does not apply—the email including the report was sent two days after

the agency had withdrawn its summons to Twitter. See Townsend 2nd Decl., Ex. B at 15, ECF

No. 60-5. The Court might think differently if the agency could show that the report had been

written before that withdrawal and had played some part in the agency’s decision to withdraw

the summons. But CBP provides no basis to support that proposition, relying instead on a

perfunctory comment that the report “relates to the deliberative process.” Vaughn Index at 25;

                                                11
see Citizens for Resp. and Ethics in Wash. v. Dep’t of Int’r, 746 F.3d 1082, 1100 (D.C. Cir.

2014) (rejecting an agency’s “conclusory explanation” as “insufficient”).

       The agency suggests in its reply that the withheld material contains “drafts and

preliminary versions of responses not yet approved for release.” Defendants’ Reply at 11 (“Defs’

Reply”), ECF No. 63. But the Vaughn Index identifies no drafts in that email, a marked

difference from other similar Index entries. See, e.g., Vaughn Index at 26 (entry for

FOIA00434–00439 mentioning a “draft report”). More, the Court cannot rely on such a

conclusory statement to justify the applicability of an exemption. See Morley v. CIA, 508 F.3d

1108, 1115 (D.C. Cir. 2007) (“[C]onclusory and generalized allegations of exemptions are

unacceptable.”). The agency must do more. CBP must release FOIA00376–00379 without

redactions for material withheld under the deliberative process privilege.

       CBP suffers from the same issue for FOIA00626–00645, an email-attached

“memorandum prepared for leadership as a summary of circumstances that led for issuance of

[the] Twitter Summons.” Vaughn Index at 31. Within that email and its attachments, CBP

applied Exemption 5 only to FOIA00628–FOIA00629. See Townsend 2nd Decl., Ex. L at 36–

37, ECF No. 60-15. Like the previous two documents, the email was sent after CBP withdrew

the summons, see id. at 34, and the agency identifies no other decision to which the

memorandum contributed. CBP again asserts that the email contains draft communications

between agency employees, see Defs’ Reply at 11, but again does not support that contention.

The Vaughn Index does not say that this document includes a draft; in fact, a different entry

appears to include the draft memorandum. See Vaughn Index at 41 (entry for FOIA00940–

00943 including a “draft summary related to Twitter lawsuit); Townsend 2nd Decl., Ex. A at 5–

8, ECF No. 60-4. And the attachment’s file name includes the word “FINAL,” implying that the

                                                12
attachment is not a draft at all. See Townsend 2nd Decl., Ex. L at 34. The agency has again

failed to demonstrate why the deliberative process privilege applies to this material. CBP will

release FOIA00628–00629 without redactions for material previously withheld under the

deliberative process privilege.

       The Committee challenges no other specific withholdings in this category. Rather, it

argues that the entire category should be disclosed under the so-called government-misconduct

exception to the deliberative process privilege. The D.C. Circuit first acknowledged this concept

in In re Sealed Case, 121 F.3d 729 (D.C. Cir. 1997). The court there held that the deliberative

process privilege “disappears altogether when there is any reason to believe government

misconduct occurred.” Id. at 746. The Committee contends that the agency’s use of its authority

to “unmask the individuals” behind a critical Twitter account qualifies as government

misconduct sufficient to overcome the privilege. Pl.’s MSJ at 17. The Government responds

that the exception does not apply to a FOIA case. See Defs’ Reply at 7–9.

       The Government correctly points out that courts in this circuit have not definitively

answered whether the government-misconduct exception applies in the FOIA context. In re

Sealed Case discussed the deliberative process privilege in the context of the common law, not a

request under FOIA. See In re Sealed Case, 121 F.3d at 738 n.5 (noting that the ability to

overcome the privilege via a sufficient showing of need “is not an issue in FOIA cases”).

District courts since then have disagreed about whether, in FOIA cases, the misconduct

exception can overcome the deliberative process privilege. Compare Nat’l Whistleblower Ctr. v.

HHS, 903 F. Supp. 2d 59, 67 (D.D.C. 2012) (“[T]he Court here finds that the government-

misconduct exception may be invoked to overcome the deliberative-process privilege in a FOIA

suit.”) with Wright v. Admin. for Child. & Fams., No. 15-cv-218, 2016 WL 5922293, at *11

                                               13
(D.D.C. Oct. 11, 2016) (“Accordingly, the Court concludes that the government misconduct

exception . . . cannot overcome an otherwise valid withholding pursuant to Exemption 5.”). The

D.C. Circuit recently acknowledged that no binding precedent recognizes a government-

misconduct exception in FOIA cases. See Protect Dem. Project, Inc. v. NSA, 10 F.4th 879, 888

(D.C. Cir. 2021). But the Circuit declined to decide whether the misconduct exception from In

re Sealed Case applies to the FOIA context. See id., n.3.

       This Court likewise need not render an opinion on the government misconduct exception

because the Committee successfully challenges the agency’s foreseeable harm analysis. CBP’s

discussion of foreseeable harm in Category 1 amounts to one sentence:

       Disclosure of such deliberative email communications would hamper CBP’s day-to-day
       operations because employees would not feel comfortable to divulge their views on
       ongoing cases or issues knowing their pre-decisional thoughts may become public.

Howard 4th Decl. ¶ 46. This explanation bears a remarkable similarity to the insufficient Hardy

Declaration in Reporters Committee. There, the FBI justified nondisclosure because employees

would be “more circumspect” in expressing their thoughts. Reporters Comm., 3 F.4th at 370.

CBP makes a more sweeping generalization, saying that employees “would not feel

comfortable” if they knew their views would be disclosed. If the Hardy Declaration failed to

pass muster, the perfunctory statement from CBP here fails too. CBP also asserts that disclosure

would “hamper [the agency’s] day-to-day operations,” Howard 4th Decl. ¶ 46, but fails to

explain how, beyond the “generic and nebulous” discomfort of employees, disclosure of this

particular information would do so, Ctr. for Invest. Rep., 436 F. Supp. 3d at 106. Both parts of

CBP’s one-sentence explanation thus fail to explain in a “focused and concrete way” how

disclosure of the Category 1 documents will impede future agency deliberations. Reporters

Comm. at 370.

                                                14
       The Court also finds that the “context and purpose” of these documents does not suggest

foreseeable harm from disclosure. Id. at 371. As recognized by the agency’s own Inspector

General, CBP pressured a private company under dubious authority. Those actions arose a long

way from the sensitive context of the Comey emails in Reporters Committee. See id. The

agency must disclose all material withheld in Category 1.

                                                2.

       Category 2 of the withheld records contains “email communications between individuals

in various CBP offices . . . on how to handle and respond to the lawsuit filed by Twitter.”

Howard Fourth Decl. ¶ 47. The agency declares that these emails reflect the “internal

deliberative process the agency engaged in before” it decided to withdraw its summons. Id.

       As with the records in Category 1, the Committee largely does not challenge the

Government’s assertions about the applicability of Exemption 5 to Category 2. And for good

reason—these emails meet the requirements for the deliberative process privilege. They are

predecisional because the authors sent them before the agency decided how to respond to

Twitter’s lawsuit. See Jud. Watch, Inc. v. FDA, 449 F.3d 141, 151 (D.C. Cir. 2006). And they

are deliberative because they include the “give-and-take” of the agency’s process; agency

personnel gave their opinions on how the agency should respond to the lawsuit. Id. The

Committee does not question that analysis.

       But the Committee does contest the agency’s foreseeable harm declaration for Category

2. The agency summarized the harm from disclosure as follows:

       It is crucial for the functioning of government that employees involved in this type of
       decision-making share their views freely with their colleagues or subordinates and
       discuss potential adverse or positive implications of any action. If such discussions are
       routinely disclosed to the public, the individuals making recommendations would not
       seek guidance from their attorneys, peers, or superiors, and would not share their views
       for fear that their communications could be published.

                                                15
Howard 4th Decl. ¶ 47. To the agency’s credit, this explanation comes much closer to a

demonstration of foreseeable harm than the explanation in Category 1. But it still falls short. No

one disputes that the privilege rests on the “obvious realization that officials will not

communicate candidly among themselves if each remark is a potential item of discovery.” Dep’t

of Interior v. Klamath Water Users Protective Ass’n, 532 U.S. 1, 8–9 (2001). Likewise, the

deliberative process privilege supports the “policy of open, frank discussion between subordinate

and chief concerning administrative action.” EPA v. Mink, 410 U.S. 73, 87 (1973).

       CBP’s merely restates those broad justifications for the privilege. The harm that CBP

identifies—the risk that agency officials might not seek guidance or share their views—

undergirds the privilege in every case. See Nat’l Sec. Archives v. CIA, 752 F.3d 460, 464 (D.C.

Cir. 2014) (“The harm from release [under the deliberative process privilege] is, among other

things, the harm to the candor of present and future agency decisionmaking.”). And naturally

nondisclosure of officials’ opinions is “crucial” to the agency’s efficacy; the object of the

privilege is “to enhance the quality of agency decisions by protecting open and frank discussion”

among agency employees. Klamath, 532 U.S. at 9. CBP therefore says nothing new about the

harm of disclosure and fails to link the possibility of that harm to the information in Category 2.

Instead, the agency repeats the generic rationale for the deliberative process privilege, just as the

FBI did in Reporters Committee. See 3 F.4th at 370. Nor again does the context and purpose of

these communications suggest a risk of foreseeable harm from disclosure. The materials in

Category 2 must therefore be disclosed. 4

4
  CBP’s explanation flags that Category 2 contains some communications between CBP
employees and agency lawyers. See Howard 4th Decl. ¶ 47 (“If such discussions are routinely
disclosed to the public, the individuals making recommendations would not seek guidance from
their attorneys . . . ”). The Court thinks those communications are better included in Category 5,

                                                  16
                                                3.

       Category 3 “covers email communications between CBP employees on how to respond to

requests for information in relation to the Twitter lawsuit from the DHS Inspector General,

Congress, and the media.” Howard 4th Decl. ¶ 48. These records include “drafts and

preliminary versions of responses not yet approved for release” and “back-and-forth discussions

about appropriate responses to the requests for information.” Id.

       As in the previous two categories, the Committee never argues that the entire category of

documents does not meet the deliberative process privilege. Nor could the Committee

realistically mount such a challenge. The eventual response to outside inquiries, whether from

Congress, the press, or an inspector general, qualifies as an agency policy. See ICM Registry,

LLC v. Dep’t of Com., 538 F. Supp. 2d 130, 136 (D.D.C. 2008). So discussions about the proper

response to those inquiries reflect the give-and-take of an agency’s deliberative process. See,

e.g., Comm. on Oversight and Gov’t Reform v. Lynch, 156 F. Supp. 3d 101, 111–12 (D.D.C.

2016) (finding that deliberative process privilege covered documents revealing internal

deliberations about response to press and congressional inquiries).

       Yet the larger theme continues here; the Committee argues that CBP fails to establish a

risk of foreseeable harm from disclosure. The Court agrees. CBP’s declaration says the

following about the risk of foreseeable harm in Category 3:

       The employees preparing responses to such inquiries must feel candid when they seek
       input from their colleagues, or individuals working in other CBP offices, in order to
       create more thorough and fulsome responses while preserving the agencies’ operational
       interests in light of ongoing litigation.

which the Court addresses below. Thus, the Court’s order to disclose Category 2 records applies
only to emails that do not meet the description in Category 5.

                                                17
Howard 4th Decl. ¶ 48. CBP continues to restate the generic rationale for the entire privilege.

Agency employees no doubt must “feel candid,” otherwise the agency’s decisions will be less

“thorough and fulsome.” Id. But that is precisely the reason to have this privilege in the first

place. As the Supreme Court has acknowledged, frank discussion of agency matters “might be

inhibited if the discussion were made public; and [] decisions and policies formulated would be

poorer as a result.” NLRB, 421 U.S. at 150.

       To be fair, the agency’s explanation places this risk in the somewhat specific context of

responses to outside inquiries. Yet the agency identifies no risk that would be specific to that

context—the agency is concerned only with a lack of candor affecting agency decisions. Recall

that this rationale undergirds the entire deliberative process privilege, and therefore cannot meet

the independent foreseeable harm requirement identified in Reporters Committee. Nor do these

communications concern anything like the undercover tactics discussed by the FBI in that case.

Thus, the “context and purpose” of the documents in Category 3 does not make “manifest” a risk

of foreseeable harm from disclosure. See Reporters Comm., 3 F.4th at 371.

       The records in Category 3 must be disclosed.

                                                 4.

       The analysis of Category 4 follows the familiar pattern of the first three categories.

Category 4 “covers email communications between CBP employees about what changes, if any,

to make to the existing agency policy on the use of the 19 U.S.C. § 1509 summons.” Howard

4th Decl. ¶ 49. The category includes “discussions, suggestions, reflections and opinions of

individual employees as opposed to the final view of the agency.” Id.

       The Court is satisfied that these documents qualify for the deliberative process privilege.

The emails preceded the agency’s decision to update its policy on the summons authority—

                                                18
making those emails predecisional. And the various opinions in those emails form an “internal

agency dialogue” about how to modify an agency policy. Reporters Comm., 3 F.4th at 364. The

give-and-take of the agency’s consultative process includes such a dialogue. See Pub. Citizen,

Inc. v. OMB, 598 F.3d 865, 876 (D.C. Cir. 2010) (“To qualify under Exemption 5, a document

must also be a direct part of the deliberative process in that it makes recommendations or

expresses opinions on legal or policy matters.”) (internal quotation omitted). The emails in

Category 4 thus were also deliberative.

       But yet again, the agency’s foreseeable harm analysis falls short. CBP explained the

harm of disclosure for this category as follows:

       If these emails were to be disclosed, individuals involved in developing policies may not
       voice their ideas or concerns freely. Such freedom is imperative for ensuring better
       quality of not only agency policies, but government as a whole.

Howard 4th Decl. ¶ 49. This explanation resembles that of Category 1: disclosure might stifle

the ability of certain employees to speak freely and that would weaken agency policies. See id.

¶ 46. Indeed, no court could disagree with that statement. But the agency must do more.

       The Hardy Declaration in Reporters Committee included a similar assertion about agency

personnel being “more circumspect” in expressing their opinions, which would “impede the

fulsome discussion of issues necessary to reach a well-reasoned decision.” Reporters Comm., 3

F.4th at 370. The D.C. Circuit rejected that as a “wholly generalized and conclusory” assertion

of harm. Id. This Court likewise holds that CBP did not demonstrate a sufficient risk of

foreseeable harm from disclosure of the records in Category 4. Nor can the Court say that

communications about an updated summons directive make “manifest” a risk of foreseeable

harm without a better explanation from CBP. Id. at 371.

       The agency must therefore disclose those records.

                                                   19
                                                 5.

       CBP’s fifth category of withheld documents relies not on the deliberative process

privilege, but on the attorney-client and attorney work-product privileges. The Government

asserts that Category 5 “covers confidential communications between DHS and CBP attorneys,

and CBP attorneys and CBP employees, about the Twitter lawsuit and the agency’s use of the 19

U.S.C. § 1509 summons authority. These include emails where CBP employees are seeking

legal advice and CBP attorneys provide advice.” Howard 4th Decl. ¶ 50. The category also

encompasses “discussions between DHS and CBP attorneys . . . about the scope of 19 U.S.C.

§ 1509, the proper interpretation of that statute, and the advice to convey to the client.” Id.

        Unlike the first four categories, the Committee begins with a categorical challenge to the

agency’s withholding under the attorney-client privilege. According to the Committee, the

redactions of names leave unanswered who sent or received the emails, whether those emails

included any non-agency personnel, and thus whether the privilege might have been waived

through disclosure outside the attorney-client relationship.

       CBP has established confidentiality across the category of documents. Its declarations

state that the emails are confidential and include instances when agency employees “[sought]

legal advice and CBP attorneys provided advice,” as well as times agency lawyers discussed

statutory advice to convey to the client. Howard 4th Decl. ¶ 50. That assertion, along with the

presumption of good faith that the Court affords agency declarations, see Safecard Servs., Inc.,

926 F.2d at 1200, goes a long way to show confidentiality. See, e.g., Watkins Law & Advocacy,

PLLC v. Dep’t of Veterans Affairs, 412 F. Supp. 3d 98, 112–13 (D.D.C. 2019).

       More, the agency’s Vaughn Index notes when emails originate in the CBP Office of

Chief Counsel and are sent in response to agency requests for legal advice. See FTC v.

                                                 20
Boehringer Ingelheim Pharms., Inc., 892 F.3d 1264, 1267 (D.C. Cir. 2018) (“The privilege

covers [] those communications in which an attorney gives legal advice . . . .). Thus, the

documents in Category 5 (as described by the agency), relate to legal matters for which the

agency “has sought professional advice” from its lawyers. Mead Data Cent. v. Dep’t of Air

Force, 566 F.2d 242, 252 (D.C. Cir. 1977); see also Tax Analysts, 117 F.3d at 618 (“The

attorney-client privilege protects confidential communications from clients to their attorneys

made for the purpose of securing legal advice or services.”). The attorney-client privilege

protects such communications.

       To show a lack of confidentiality, the Committee highlights one document. FOIA0040–

0045 is an email chain about Twitter’s lawsuit against the agency. See Townsend 2nd Decl., Ex.

B at 2–7. A journalist asked for a comment on the suit, and a CBP official forwarded the request

to at least one CBP lawyer, noting that the agency would respond that it could not comment on

pending litigation. See id. at 7. Later on, the same CBP official asked the Office of Chief

Counsel to brief the Commissioner on the suit. See id. at 6. An associate counsel responded

with a proposed date and referenced a “summary,” which presumably accounts for the redaction

on that page. Id. at 5.

       The Committee contends that CBP has not shown that confidentiality was expected in the

handling of this advice on how to respond to a media request. The Court disagrees because the

purported legal advice was not “designed to be disclosed to a third party.” Pl.’s MSJ at 29

(citing Jud. Watch v. USPS, 297 F. Supp. 2d 252, 267 (D.D.C. 2004)). In fact, the unredacted

emails already include the agency’s response to the media inquiry. Even though the discussion

was about a statement that would be publicized, the exact contents of and deliberations preceding

it qualify as a protected attorney-client communications. See Comp. Enter. Inst. v. EPA, 232 F.

                                                21
Supp. 3d 172, 188 (D.D.C. 2017) (protecting emails between agency lawyers and staff where the

“primary purpose[] of the emails was to obtain legal advice concerning the legal risks of the

various options for a public statement”).

       The agency fares less well, however, in its redactions to certain PowerPoint

presentations. CBP withheld excerpts of PowerPoint presentations on recordkeeping, use of the

summons authority, and the False Claims Act. See Townsend 2nd Decl., Ex. C at 7–38, 44–76,

112–151. The agency asserts in the Index that all withheld material involved “legal advice” or

“legal guidance” and was thus privileged. Vaughn Index at 55 (entry for FOIA1475–1506), at 72

(entry for FOIA2268–2300), and at 95 (entry for FOIA3790–3829).

       Assuming the agency is correct, that guidance arose in training presentations meant for

distribution wider than discrete chains of back-and-forth emails between agency employees and

agency lawyers. CBP must therefore say why these training materials were limited in their

distribution. The agency did so in National Security Counselors v. CIA, 206 F. Supp. 3d 241,

286 (D.D.C. 2016), a case relied on by CBP. There, the plaintiff challenged the withholding of

certain portions of agency training materials. The court affirmed the nondisclosure, noting that

the agency’s declaration had specifically stated that the materials “were not shared beyond the

parties.” Id.

       The agency here makes no similar statement and fails even to mention whether these

training presentations were bound for a limited audience. 5 CBP cannot carry its burden without

5
  The agency also asserts that the attorney work-product privilege applies to these records. See
Defs’ Reply at 16. But CBP fails to discuss at all how training materials for such a wide
audience could be prepared “in anticipation of litigation.” Nat’l Ass’n of Crim. Def. Lawyers,
844 F.3d at 250.

                                                22
more. Thus, the agency’s asserted Exemption 5 redactions for pages 1492, 1498, 2281, 2283,

2290, 2294, 2296–99, 3810, 3819, 3824, and 3828 will be disclosed.

       The parties also dispute the agency’s withholding in full of an attachment to an email sent

between lawyers in CBP’s Office of Chief Counsel. According to CBP, the attachment is a legal

memorandum from 1997 relating to “CBP’s seizure authorities of prohibited merchandise with a

value of under $500,000.” Fifth Declaration of Patrick Howard ¶ 8 (“Howard 5th Decl.”), ECF

No. 63-2. A senior agency attorney sent this attachment to a junior attorney as “useful

information” for the latter attorney’s memo on CBP’s 19 U.S.C. § 1509 authority. Id. The

government asserts that the document qualifies for both the attorney-client privilege and the

work-product privilege. 6

       The Court agrees with the Committee that the agency has not justified those privileges for

the 1997 memo. CBP tells the Court only that the attachment provides “legal advice.” Id. What

CBP does not say is whether agency lawyers provided that 1997 guidance to “protect [the

agency’s] interest” as part of some dispute or as a “neutral, objective analys[i]s” of an agency

statute. Coastal States, 617 F.2d at 863. That distinction matters because the latter does not

receive protection under the privilege. See id. Because CBP does not explain this aspect of the

memorandum’s nature, the agency has failed to justify withholding the 1997 memo under the

attorney-client privilege. See Machado Amadis v. Dep’t of Just., 388 F. Supp. 3d 1, 11 (D.D.C.

2019) (“the responding federal agency bears the burden of proving that it has complied with its

6
  The Vaughn Index also says that CBP asserts the deliberative process privilege. See Vaughn
Index at 28 (entry for FOIA00478–00506). But that Index entry is for the entire email chain.
CBP clarified in a supplemental declaration that, for the 1997 memo, the agency relies only on
the attorney-client and work-product privileges. See Howard 5th Decl. ¶ 8.

                                                23
obligations under FOIA.”), aff’d sub nom. Amadis v. Dep’t of State, 971 F.3d 364 (D.C. Cir.

2020).

         As for the work-product privilege, CBP does not say whether the 1997 memo was

prepared in anticipation of litigation. See Nat’l Ass’n of Crim. Def. Lawyers, 844 F.3d at 250.

True, the attachment emerges amid a flurry of emails between lawyers worried about Twitter’s

response to the summons. The Court does not doubt—and the Committee gives no argument

otherwise—that those emails reflect the “mental impressions” of agency lawyers worried about

possible litigation with Twitter. Hickman v. Taylor, 329 U.S. 495, 511 (1947); see also Judicial

Watch, Inc. v. DOJ, 432 F.3d 366, 370 (D.C. Cir. 2005) (holding that contents of emails sent

among agency lawyers qualified for the work-product privilege). But someone wrote the 1997

memo well before the prospect of litigation with Twitter. And the Government does not say

whether that earlier author contemplated litigation when writing the memo. The Court cannot

fill in that detail for the agency. Thus, CBP will release the 1997 memo.

         Lastly, the Committee challenges the agency’s demonstration of foreseeable harm for this

category. Before the Court resolves that dispute, some background is necessary. The D.C.

Circuit has explicated the foreseeable harm requirement only in relation to the deliberative

process privilege. See Reporters Comm., 3 F.4th at 361; Amadis, 971 F.3d at 370. Such a

limited focus in the caselaw does not cabin the requirement to that privilege—indeed, nothing in

the provision’s text limits it to any one exemption. See Nielsen v. Preap, 139 S. Ct. 954, 969

(2019) (“every word and every provision” of a statute “is to be given effect”). But Congress

added the foreseeable harm requirement specifically to limit “agency overuse and abuse of

Exemption 5 and the deliberative process privilege.” Reporters Comm., 3 F.4th at 369. So an

agency’s burden under the foreseeable harm requirement may be more easily met when invoking

                                                24
other privileges and exemptions for which the risk of harm through disclosure is more self-

evident and the potential for agency overuse is attenuated.

       Take the attorney-client privilege withholdings here. The agency’s declaration says:

       Routine disclosure of information protected by attorney-client and/or attorney work
       product privilege would shake the very foundation of the legal profession, as clients
       would not feel comfortable asking for advice and attorneys would not feel comfortable
       providing it.

Howard 4th Decl. ¶ 50. Although the agency’s language may be overwrought, the attorney-

client privilege holds a prominent and sacrosanct role in the law. See Upjohn Co. v. United

States, 449 U.S. 383, 389 (1981) (“The attorney-client privilege is the oldest of the privileges for

confidential communications known to the common law.”). Release of attorney-client

communications would undoubtably undermine our legal culture. Agencies would lose an

important tool in their decisionmaking process—employees’ ability to confidentially consult

agency lawyers.

       More, the “observance of law” otherwise promoted by the privilege would be hampered

during agency decisionmaking. Id. Courts have long recognized that confidentiality encourages

clients to consult counsel before embarking on a potentially illegal venture. See Fisher v. United

States, 425 U.S. 391, 403 (1976) (“The purpose of the privilege is to encourage clients to make

full disclosure to their attorneys.”). That rationale and benefit is especially applicable for federal

officials making policy decisions. Thus, the law already acknowledges and guards against the

risk of harm that would come from disclosing attorney-client communications. And CBP has

articulated a fairly non-generalized description of that risk. That is good enough.

       The record here—as well as the agency’s explanation—therefore shows that disclosure of

the communications in Category 5 would impair the relationship between an agency and its

attorneys. Accord Machado Amadis, 388 F. Supp. 3d at 20 (finding agency’s concern about

                                                  25
potential chilling effect of disclosure of attorney work product sufficient to show foreseeable

harm). The agency must disclose from this category only those specific documents that the

Court has mentioned.

                                                6.

         Category 6 “covers the various drafts, and related email communications, about the

updated 19 U.S.C. § 1509 summons directive.” Howard 4th Decl. ¶ 51. CBP attests that the

drafts include “contextual recommendations, comments, and redline edits made by individuals

from various CBP offices that convey the authors’ opinions regarding the draft language.” Id.

CBP asserts the deliberative process privilege for those drafts. The agency also notes that some

drafts contain comments and edits made by CBP attorneys about the legal sufficiency of the

directive. The agency justifies withholding of those specific drafts under the attorney-client and

attorney work-product privileges.

         The Committee responds that CBP has reflexively withheld drafts without showing that

the drafts are predecisional. The Committee hypothesizes that “some or all of these records may

have lost their predecisional status due to their adoption by the agency.” Pl.’s MSJ at 21. The

Court agrees with the Committee, as has the Circuit for many years, that draft documents are not

presumptively privileged. See Dudman Commnc’ns Corp. v. Dep’t of Air Force, 815 F.2d 1565,

1569 (D.C. Cir. 1987). But the Committee misplaces the burden here. Whereas the agency

usually holds the burden to show why an exemption applies, the requester bears the burden to

show why “an otherwise predecisional and deliberative document has lost its privileged status

through adoption.” Gellman v. Dep’t of Homeland Sec., 525 F. Supp. 3d 1, 7 (D.D.C. 2021); see

also McKinley v. Bd. of Governors of the Fed. Reserve Sys., 849 F. Supp. 2d 47, 63 n.14 (D.D.C.

2012).

                                                26
        The Committee speculates that CBP might have adopted some drafts but cannot confirm

that speculation with a single document from the Vaughn Index. True, some courts have asked

an agency to say proactively whether it has adopted a draft. See, e.g., Heffernan v. Azar, 317 F.

Supp. 94, 125–26 (D.D.C. 2018). But those cases guard against the Government using the

“draft” label as a “get-out-of-FOIA-free card.” Gellman, 525 F. Supp. 3d at 8. They do not

conflict “with the general rule that plaintiffs bear the burden to prove that a document has lost its

predecisional status through adoption.” Id.

        More, CBP has met its burden to show that these drafts qualify for the privilege. CBP

declares that the drafts contain various deliberative thoughts from agency employees (a fact not

rebutted by the Committee), and the parties agree that CBP ultimately issued an updated

directive. CBP has therefore shown a “logical” application of the deliberative process privilege

to these draft documents. Larson v. Dept of State, 565 F.3d 857, 862 (D.C. Cir. 2009). In

contrast, the Committee has done nothing but speculate. Thus, the drafts in Category 6 qualify

for the deliberative process privilege. 7

        As to the foreseeable harm from disclosure of the records in this category, CBP states:

        Disclosure of the evolving iterations of the directive, and the communications discussing
        the drafts, would allow a reader to probe too deeply into the thought processes of the
        drafters and would have a chilling effect on communication between agency employees.
        Further, disclosure of the editorial process would stifle the creative thinking and candid
        exchange of ideas necessary to produce government policies and run a substantial risk of
        confusing the public, and/or intruding on the deliberative process of the agency.

Howard 4th Decl. ¶ 51.

        This explanation barely carries CBP’s burden. The agency lists many of the generalized

rationales for the privilege—stifled creative thinking, candor among employees, and a chilling

7
  This holding also applies, for the reasons stated in the Court’s analysis of Category 5, to any
comments from agency attorneys withheld under the attorney-client privilege.

                                                 27
effect on intra-agency communication. But CBP also worries that disclosure would confuse the

public. The Court agrees that this is a foreseeable risk of harm for this category. To disclose

drafts of the directive risks that the public might mistake those preliminary thoughts for the

agency’s actual policy. See, e.g., Leopold v. DOJ, No. 19-2796, 2021 WL 3128866 at *5

(D.D.C. July 23, 2021). The Committee rejects this notion, but the D.C. Circuit has long

recognized that the risk of public confusion “has a special force with respect to disclosures of

agency positions or reasoning concerning proposed policies.” Petroleum Info. Corp. v. Dep’t of

Interior, 976 F.2d 1429, 1436 n.10 (D.C. Cir. 1992) (emphasis in original).

       CBP contemplated just such a policy with the updated summons directive. More, the

agency specifically linked these harms to “the editorial process,” a more identifiable and special

part of agency decisionmaking than what has been mentioned in prior categories. True, the

insufficient explanation for Category 2 likewise discusses “the policy reached by the agency”

when it withdrew the Twitter summons. Howard 4th Decl. ¶ 47 (emphasis added). But the

Court finds a significant difference between a written agency policy like the summons directive

and one isolated action taken by the agency. Cf. Hardy v. ATF, 243 F. Supp. 3d 155, 176–76

(D.D.C. 2017) (“Here, [the agency] is not promulgating a ‘policy,’ it has merely released a report

about the adequacy of another agency’s record-keeping.”). The written nature of the summons

directive risks that the public might erroneously think that a prior draft is an official agency

policy. No such risk attends a decision by CBP to withdraw a summons.

       A similar rationale distinguishes the drafts here from the draft IG report in Reporters

Committee. The FBI asserted that disclosure of that draft report “would potentially confuse the

public about the reasons for the [IG’s] actions.” Reporters Comm., 3 F.4th at 371. The court

rejected that assertion as a basis of foreseeable harm. But IG reports do not set agency policy,

                                                 28
they analyze it. Thus, the risk of public confusion from an IG report has less force than the

policy drafts that comprise this category.

       The Court therefore accepts the agency’s declaration on the foreseeable harm that might

result from disclosure of the drafts in Category 6. CBP need not disclose this material.

                                                 7.

       Category 7 “contains email communications between CBP attorneys and CBP employees

about how to process” the Committee’s FOIA requests. Howard 4th Decl. ¶ 52. Those include

“deliberative discussions between CBP employees about how to handle the requests.” Id. The

agency asserts that the deliberative process privilege and the attorney-client privilege justify

withholding this category of documents. The Committee does not challenge the agency’s

reliance on those privileges as a categorical matter.

       The Court is satisfied that both privileges apply to this category. Discussions about how

to handle a FOIA request are predecisional because they occur before the decision to respond to

the request. Machado Amadis, 388 F. Supp. 3d at 19 (finding FOIA “Blitz Forms” to be

predecisional). CBP also describes those conversations as “deliberative,” a fact that the

Committee does not dispute. As for the discussions between the agency lawyers and agency

employees, the Court has no reason not to apply its reasoning from Category 5 to those

communications in Category 7.

       The Committee does challenge, however, individual withholdings that likely fall into this

category. The first is FOIA1538–1540, a “document log created by [a] FOIA analyst.” Vaughn

Index at 63. The Committee argues that the agency makes no showing that the withheld material

“makes recommendations or expresses opinions on legal or policy matters.” Pl.’s MSJ at 21.

The Court agrees. The agency states only that the log contains the analyst’s “notes with respect

                                                 29
to the processing of” the Committee’s requests. Defs’ Reply at 12. That says nothing about

whether the notes include the type of opinions and recommendations that the privilege protects.

The notes might discuss, for instance, the progress of the analyst’s review, not the analyst’s

personal opinions about the proper way to conduct the FOIA search. See Coastal States, 617

F.2d at 866 (“The exemption thus covers recommendations, draft documents, proposals,

suggestions, and other subjective documents which reflect the personal opinions of the writer

rather than the policy of the agency.”).

       CBP responds that Exemption 5 covers the log because the analyst apparently processes

and prepares the release package for a supervisor, including the log. See Defs.’ Reply at 11-12.

And, according to CBP, “recommendations from subordinates to superiors lie at the core of the

deliberative-process privilege.” Id. (quoting Amadis, 971 F.3d at 370). The Court does not

quibble with that statement. But the agency has not confirmed that this particular log contained

any recommendations or opinions. Indeed, the Fifth Howard Declaration suggests that the log

was made for the analyst’s benefit, not a supervisor’s. See Howard 5th Decl. ¶ 11 (“The FOIA

log is a chart detailing the notes taken by the FOIA specialist while processing the FOIA request,

to assist the FOIA specialist with the tracking of the search and other matters related to the

processing of the request.”) (emphasis added). That a superior might review the notes from the

analyst buttresses the predecisional nature of the document. See Access Repts. v. DOJ, 926 F.2d

1192, 1195 (D.C. Cir. 1991) (“A key feature under both the predecisional and deliberative

criteria is the relation between the author and recipients of the document.”). But the mere fact of

review by a superior does not transform nondeliberative comments into deliberative ones. CBP

simply has not provided the Court with a sufficient basis to conclude that this document contains

deliberative content. Thus, the FOIA log will be released in full.

                                                 30
       The same analysis mandates the release of FOIA1544, an “email between CBP FOIA

employees.” Vaughn Index at 63. CBP applied the deliberative process privilege to discussions

“regarding the review process for records being released under FOIA.” Id. The agency says

nothing more about this email, which means the Court has no idea whether the discussions

contained there are deliberative. Cf. Comp. Enter. Inst., 232 F. Supp. 3d at 186–87 (exempting

from disclosure emails among agency FOIA staff where the agency said the emails contained “a

discussion among staff members seeking to clarify the request for information” (cleaned up)). In

fact, CBP does not even respond to the Committee’s arguments that the agency improperly

withheld this allegedly deliberative material. The agency thus has not carried its burden, and the

material withheld on that document under Exemption 5 should be released.

       Beyond these individual documents, the agency’s showing of foreseeable harm for this

category is much briefer than for other categories:

       Disclosing this information would undermine the deliberative process privilege and the
       attorney-client privilege, and would have a chilling effect on communication between
       agency employees who regularly process FOIA requests.

Howard 4th Decl. ¶ 52. This explanation differs slightly from previous explanations in that CBP

mentions two privileges. CBP has not shown enough for either privilege.

       For the deliberative process withholdings, CBP says only that disclosure would

“undermine the deliberative process” and “would have a chilling effect” on CBP employees who

process FOIA requests. Howard 4th Decl. ¶ 52. CBP therefore offers nothing beyond the

“generic rationales” for the privilege itself. Reporters Comm., 3 F.4th at 370. Those conclusory

statements do not meet the agency’s burden. And the record does not show that these internal

discussions about FOIA processing implicate any sensitive context that would make obvious a

risk of harm from disclosure.

                                                31
       CBP says even less on the attorney-client privilege, noting only that disclosure would

“undermine the attorney-client privilege.” Such a conclusory statement again does not suffice to

show a risk of foreseeable harm. True, the Court has already said that establishing the attorney-

client privilege will go a long way to show the risk of foreseeable harm. See supra. But an

agency must still provide a non-generalized explanation on the foreseeable harm that would

result from disclosure of attorney-client communications. CBP has barely provided any

explanation at all.

       More, the record shows no obvious reason why disclosing these records would create a

foreseeable harm. The agency describes most of the attorney-client records withheld in this

category as discussions between CBP lawyers and FOIA employees about “the search for

responsive records,” Vaughn Index at 58 (entries for FOIA001438–48), and “the processing of

records being requested,” Vaughn Index at 64–66 (entries for FOIA001580–91, FOIA001601–

36, FOIA001644–45, FOIA001647–64). Such a vague description covers substantive legal

discussions with attorneys about processing, the disclosure of which would threaten attorney-

client communications.

       But that description also covers more minor communications, disclosure of which would

have less dire consequences, if any. The Court thus cannot know which type of discussions have

been withheld, and accordingly cannot say that the risk of disclosure is “manifest” on the record.

See Reporters Comm., 3 F.4th at 371. CBP could have made that risk clear if it had provided an

explanation beyond the five words “would undermine the attorney-client privilege.” 8 But based

8
  That cursory explanation distinguishes this category from Category 5, which at least provided
some explanation for why the attorney-client communications would be harmed by disclosure.
CBP might also argue that these communications should be shifted to Category 5, much like the
Court did for the attorney-client records in Category 2. The Court took that action because the
description of records in Category 2 mirrored the description for Category 5. Both categories

                                                32
on the agency’s boilerplate explanation and the Vaughn Index, the Court finds that CBP has not

shown a risk of foreseeable harm from disclosing these attorney-client communications. Thus,

CBP must disclose all material in Category 7.

        The Court has repeatedly found CBP’s explanations as to the risk of foreseeable harm to

be wanting here. The agency could have said more, and it likely would have met its burden in

many categories if it had done so. To be sure, the D.C. Circuit released Reporters Committee

after dispositive briefing had concluded in this case. But the D.C. Circuit had already issued

Amadis, which explicitly credited the notion that agencies “cannot simply rely on generalized

assertions.” 971 F.3d at 371. CBP seems to have paid little attention to that decision. And

multiple district court decisions, including one involving CBP, had already rejected similar

explanations from agencies. See, e.g., Ctr. for Invest. Reporting, 436 F. Supp. 3d at 106–07.

More, the agency never sought to update its declarations or provide supplemental briefing, nor

did it respond when the Committee notified the Court about Reporters Committee. In short,

CBP had opportunities to say more. But it never did. This is now CBP’s second attempt at

summary judgment, and the Committee deserves resolution and vindication in the face of CBP’s

lackluster efforts to live up to its statutory obligations.

                                                   B.

        Turning to other withholdings, CBP also redacted the name of many agency employees.

Specifically, CBP disclosed the names of “DHS and CBP senior leadership,” but withheld the

names of all other non-public facing employees, including law enforcement officers. Howard

dealt with Twitter’s lawsuit. See Howard 4th Decl. ¶¶ 47, 50. Thus any attorney-client
communications in Category 2 belonged in Category 5. Such a transfer would not work for the
attorney-client records in Category 7, which considered a different and more routine subject
matter than Categories 2 and 5.

                                                   33
4th Decl. ¶ 53. CBP also withheld the email addresses and phone numbers of those individuals

but released their titles and positions. See Howard 5th Decl. ¶¶ 13–14. The agency justified

these withholdings under Exemptions 6 and 7(C). The Committee challenges only the

withholding of names. See Pl.’s MSJ at 32, n.6.

       Exemptions 6 and 7(C) permit an agency to withhold personally identifiable information,

though the language for each exemption differs slightly. Exemption 6 withholds “personnel and

medical files and similar files the disclosure of which would constitute a clearly unwarranted

invasion of personal privacy.” 5 U.S.C. § 552(b)(6) (emphases added). Exemption 7(C) applies

only to information “compiled for law enforcement purposes,” the disclosure of which “could

reasonably be expected to constitute an unwarranted invasion of personal privacy.” Id.

§ 552(b)(7)(C) (emphasis added). Courts have noted these linguistic variations. See Nat’l

Archives & Recs. Admin v. Favish, 541 U.S. 157, 165–66 (2004). Based on those differences,

the standard for disclosure under Exemption 7(C) is “somewhat broader” than the standard under

Exemption 6. DOJ v. Reporters Comm. for Freedom of the Press, 489 U.S. 749, 756 (1989).

       CBP asserts that it is a law enforcement agency and thus that it compiled the withheld

records for law enforcement purposes. See Defs’ MSJ at 20–21. Not only does the Court treat

that assertion with some deference, see Tax Analysts v. IRS, 294 F.3d 71, 77 (D.C. Cir. 2002), the

Committee does not dispute it. So the Court need only consider whether the agency properly

invoked Exemption 7(C). See ACLU v. DOJ, 655 F.3d 1, 6 (D.C. Cir. 2011). Under that

exemption, the Court balances CBP’s asserted privacy interest “against the public interest in

disclosure.” Favish, 541 U.S. at 171.

       The agency presents a more than cognizable privacy interest here. The D.C. Circuit has

“consistently supported the nondisclosure of names or other information identifying individuals

                                               34
that appear in law enforcement records,” including investigators. Schrecker v. DOJ, 349 F.3d

657, 661 (D.C. Cir. 2003). That is partially because individuals, whether they be “suspects,

witnesses, or investigators,” have a “strong interest” not to be “associated unwarrantedly with

alleged criminal activity.” Fitzgibbon v. CIA, 911 F.2d 755, 767 (D.C. Cir. 1990). And that

interest makes much sense—individuals associated with an unpopular agency action might be

subject to public scrutiny and perhaps harassment. See Lesar v. DOJ, 636 F.2d 472, 487 (D.C.

Cir. 1980) (holding that government agents “have a legitimate interest in preserving the secrecy

of matters that conceivably could subject them to annoyance or harassment in either their official

or private lives”). Courts in this district have recognized that risk as a firm basis for a strong

privacy interest. See, e.g., Jud. Watch, Inc. v. Dep’t of State, 875 F. Supp. 2d 37, 47 (D.D.C.

2012).

         CBP has shown such a risk here. As CBP describes, identifying non-public facing CBP

employees in an operational context “risks the unwarranted attribution and attention to the

employee beyond the confines of their job and into their personal life.” Defs’ MSJ at 23. In fact,

CBP cites multiple instances where its employees have experienced harassment solely based on

their employment with CBP. See Howard 4th Decl. ¶ 56. These instances include vandalism of

multiple CBP vehicles, threats sent to Border Patrol agents by fax, and social media threats to

douse CBP officers with acid. And according to news reports provided by the agency, all CBP

employees in Portland, Oregon, must hide their CBP affiliation out of fear that their personal

information will leak online. 9

9
   See Chantal Da Silva, CBP Chief Says Feds Don’t Wear Name Badges Due to Fears of Being
‘Doxxed’, Newsweek (July 23, 2020, 11:42 AM), https://www.newsweek.com/cbp-chief-says-
feds-dont-wear-name-badges-due-doxing-1519994.

                                                  35
         The Committee downplays these concerns and argues that CBP has merely applied a per

se rule of nondisclosure for the names of agency employees. The Court disagrees—the law

might “disfavor” the blanket withholding under Exemption 7(C) of the names of agency

employees, Stern v. FBI, 737 F.2d 84, 91 (D.C. Cir. 1984), but a real threat (rather than a

speculative one) to the privacy of agency employees will justify withholding of names, see Elec.

Priv. Info. Ctr., 384 F. Supp. 2d at 116 (citing Dep’t of Air Force v. Rose, 425 U.S. 352, 380 n.19

(1976)). The incidents reported by CBP—all of which occurred during this litigation—show a

real threat to the employees’ privacy. Those CBP employees therefore have a strong privacy

interest in their identities.

         On the other side of the equation, the Committee asserts a public interest in disclosing

CBP’s “improper efforts” to use its summons authority to compel Twitter to unmask an account.

Pl.’s MSJ at 35. The Court accepts that as a significant public interest under Exemption 7(C).

See Favish, 541 U.S. at 173 (accepting that whether agency “acted negligently or otherwise

improperly in the performance of [its] duties” is a significant public interest under Exemption

7(C)).

         Yet the Committee has not shown how that public interest outweighs the employees’

privacy interest. “The only relevant public interest in the FOIA balancing analysis is the extent

to which disclosure of the information sought would shed light on an agency’s performance of its

statutory duties or otherwise let citizens know what their government is up to.” Dep’t of Def. v.

FLRA, 510 U.S. 487, 497 (1994) (emphasis added). Knowledge of the employees’ names would

not matter here. The Twitter summons is already in the public domain, as is the Inspector

General’s report on how CBP used its summons authority in its dealings with Twitter. The

Committee offers no suggestion as to how knowing names alone will clarify the agency’s

                                                 36
activities, particularly after public dissemination of the summons and the IG Report. 10 The Court

therefore finds that the agency properly invoked Exemption 7(C) for the names of almost all

CBP non-public facing employees. See SafeCard Servs., 926 F.2d at 1206 (“[U]nless access to

the names and addresses of private individuals appearing in the files within the ambit of

Exemption 7(C) is necessary in order to confirm or refute compelling evidence that the agency is

engaged in illegal activity, such information is exempt from disclosure.”); see also Beck v. DOJ,

997 F.2d 1489, 1493 (D.C. Cir. 1993) (“Information that reveals little or nothing about an

agency’s own conduct does not further [FOIA’s] purpose . . . .”).

       That holding does not apply, however, to the agency’s redactions of the names of Special

Agent Adam Hoffman and Special Agent in Charge Stephen Caruso. Their names appeared on

the Twitter summons and in the subsequent litigation. Their involvement with the summons

therefore exists in the public domain, and CBP cannot withhold such public information under an

otherwise valid exemption claim. See Davis v. DOJ, 968 F.2d 1276, 1279 (D.C. Cir. 1992).

Thus, CBP will remove any redactions of the names of Hoffman and Caruso in its next

production to the Committee.

       Like the withholdings under Exemption 5, the agency must establish a foreseeable harm

from disclosure of these names. CBP says disclosure of names would cause invasions of privacy

for many CBP employees. That assertion would likely be enough to meet the agency’s burden.

See, e.g., Ecological Rights Found. v. EPA, — F. Supp. 3d —, 2021 WL 2209380 at *20 (D.D.C.

Jun. 1, 2021). But the agency goes beyond that relatively generalized assertion and cites specific

examples of harassment and threats against CBP employees. See Howard 4th Decl. ¶ 56. These

10
   Other material withheld by CBP and requested by the Committee likely would help clarify the
agency’s actions. But CBP withholds only the names under Exemption 7(C).

                                                37
examples explain in a “focused and concrete way” how disclosure of the names would harm

CBP employees. Reporters Committee, 3 F.4th at 369. CBP has shown a risk of foreseeable

harm.

        The Court holds that CBP correctly withheld the names of all non-public-facing

employees, except for Agents Hoffman and Caruso.

                                                C.

        CBP also withheld records under Exemption 7(E). That exemption permits withholding

of “information compiled for law enforcement purposes” when release of that information

“would disclose techniques and procedures for law enforcement investigations or prosecutions,

or would disclose guidelines for law enforcement investigations or prosecutions if such

disclosure could reasonably be expected to risk circumvention of the law.” 5 U.S.C.

§ 552(b)(7)(E). This exemption “sets a relatively low bar” to justify withholding of material; the

agency need only “demonstrate logically how the release of the requested information might

create a risk of circumvention of the law.” Blackwell v. FBI, 646 F.3d 37, 42 (D.C. Cir. 2011).

Any information that “could increase the risks that a law will be violated” will be protected from

disclosure. Mayer Brown LLP v. IRS, 562 F.3d 1190, 1193 (D.C. Cir. 2009).

        What an agency must do to show foreseeable harm under Exemption 7(E) is an open

question. The D.C. Circuit’s cases about the foreseeable harm requirement have exclusively

discussed Exemption 5. See Reporters Comm., 3 F.4th at 361; Amadis, 971 F.3d at 370. Recall,

however, that fulfilling the terms of other privileges or exemptions goes a long way to meeting

the foreseeable harm requirement. Exemption 7(E) is one such exemption. As other courts have

acknowledged, Exemption 7(E) by its own terms already requires that an agency show a risk of

foreseeable harm. See Reporters Comm. for Freedom of the Press v. FBI, — F. Supp. 3d —,

                                                38
2021 WL 2913078 at *6 (D.D.C. July 12, 2021); CREW v. DHS, 525 F. Supp. 3d 181, 192 & n.4

(D.D.C. 2021). The text of 7(E) allows withholding only when the withheld material “could

reasonably be expected to risk” circumvention of the law. Put differently, an agency must show

some risk of circumvention before withholding material under 7(E). The exemption’s text thus

already forces the agency to show some risk of harm.

       The Court accepts the Committee’s response that the freestanding foreseeable harm

requirement in 5 U.S.C. 552(a)(8) can still guard against general explanations and boilerplate

language used to justify withholdings. See Plaintiff’s Reply at 13, n.1 (“Pl.’s Reply”), ECF No.

64. But the Court is also mindful of the D.C. Circuit’s reasoning in Reporters Committee, which

relied on the “context and purpose” of certain communications to show a risk of foreseeable

harm. Reporters Comm., 3 F.4th at 372.

       With those principles in mind, the Court turns to the information withheld under this

exemption. CBP invoked Exemption 7(E) on four categories of information. The Committee

challenges only three.

                                                1.

       The first category covers the techniques and procedures that CBP uses “to investigate

unauthorized disclosure of information and cybersecurity threats.” Howard 4th Decl. ¶ 59.

According to CBP, these records include the techniques used by CBP to investigate whether the

unauthorized release of internal emails occurred because of “misconduct by a CBP employee” or

“a compromise in the security systems.” Id. The agency asserts that this information “could be

exploited and used to develop and employ countermeasures to diminish the effectiveness of

CBP’s cybersecurity and counterintelligence measures.” Id.

                                               39
       The Committee argues that the agency provides a “near-verbatim recitation of the

statutory standard” and fails to explain logically how these records might create circumvention

of the law. Pl.’s MSJ at 38. Not so. CBP set forth the exact types of techniques it seeks to

protect—those procedures used to investigate cybersecurity threats and disclosure of internal

information. Those specific procedures are hardly a verbatim recitation of the statute. Compare

Blackwell, 646 F.3d at 42 (upholding nondisclosure where FBI withheld “details about

procedures used during the forensic examination of a computer by an FBI forensic examiner”)

with CREW, 746 F.3d at 1102 (requiring disclosure where FBI wished to protect “procedures and

techniques used by FBI agents during the investigation” but identified no specific procedures).

And disclosure would logically lead to an obvious harm: Bad actors would know how CBP

responds to cybersecurity threats. With that information, outsiders might tailor their activities to

exploit vulnerabilities in the agency’s detection and investigation techniques.

       CBP readily establishes this possible circumvention in FOIA1291–1313, which the

agency partially withheld under this exemption. See Vaughn Index at 52-53; see also Townsend

2nd Decl., Ex. D at 7–29, ECF No. 60-7. Those pages are emails from the agency’s IT office,

containing “summaries put together at the end of each shift providing progress for each ongoing

investigation related to breaches of CBP systems.” Howard 5th Decl. ¶ 15. One such

investigation covered in these emails was whether the @alt_USCIS Twitter account had released

intra-agency communications. See id. And these emails include the steps taken to determine

whether a breach has occurred. As the agency says, such information “would provide a play-by-

play guide to potential bad actors” into CBP’s procedures. Id. Those bad actors could “employ

countermeasures” to cloak their activities from detection. Id. The Committee does not challenge

these withholdings in its reply brief, nor says there why the records in Category 1 do not qualify

                                                 40
for Exemption 7(E). See Pl.’s Reply at 28. The Court agrees with the agency’s invocation of the

exemption for this category.

       As to foreseeable harm, the Committee argues that the agency gives only a boilerplate

recitation of the foreseeable harm standard. See Pl.’s Reply at 14. The Court disagrees. The

information withheld in this category shows step-by-step how CBP investigates potential cyber

vulnerabilities. The “very nature” of such sensitive information conveys a risk of harm from

disclosure. Reporters Comm., 3 F.4th at 372. And as described above, the agency’s declarations

have explained that risk. The Court is satisfied that CBP has established a risk of foreseeable

harm for this category.

       CBP therefore properly withheld the documents in this category.

                                                2.

       The second category of information withheld under Exemption 7(E) details the

“techniques and procedures CBP uses to conduct internal investigations.” Howard 4th Decl.

¶ 60. Those include the procedures that the agency “routinely use[s]” and “non-public details

about when, how, and under what circumstances” the agency employs each procedure. Id. CBP

says that if the public learned about the circumstances in which the agency uses these various

techniques, “bad actors will learn information that they can use to avoid law enforcement

consequences.” Id. ¶ 61.

       The Committee dismisses those statements as “boilerplate representation[s]” that do not

show logically how the disclosure of these records would risk circumvention of the law. Pl.’s

MSJ at 39. The Court agrees that CBP has not provided much on the applicability of Exemption

7(E) to this category. But the agency has identified the procedures that would be harmed by

                                                41
disclosure (the internal investigatory procedures), and the documents themselves highlight the

risk of circumvention should those procedures be disclosed.

       Consider FOIA1034–1038, an “internal email communication,” see Vaughn Index at 45,

which includes information about “what steps [CBP’s Office of Professional Responsibility]

would normally take in an internal investigation involving a cybersecurity breach.” Howard 5th

Decl. ¶ 16. The Committee again dismisses the agency’s assertion that this information could

circumvent the law. See Pl.’s Reply at 28. But why? A disgruntled employee who wished to

leak CBP’s proprietary information from the inside could, based on the disclosure of how CBP

investigates internal misconduct, exploit CBP’s procedures to avoid detection. That information

“would inform individuals on the types of activities that trigger a full investigation” and would

cause those individuals to “adjust their behavior accordingly,” thereby prompting circumvention

of the law. Defs’ MSJ at 25-26. And the sensitive context of this information—the details about

how CBP conducts internal investigations of cybersecurity breaches—shows a risk of

foreseeable harm. See Reporters Comm., 3 F.4th at 372.

       The Court therefore affirms CBP’s withholding of the records in Category 2.

                                                3.

       The third category of material withheld under this exemption “covers techniques and

procedures related to the issuance or non-issuance of administrative summonses in specific

investigations, some of which may be ongoing.” Howard 4th Decl. ¶ 62. CBP withheld “dates

of investigations, PII on the individuals being investigated, circumstances of the alleged

misconduct, location of the individual, whether large criminal activity was implicated, and

specific techniques or procedures used to further the investigation.” Id. CBP asserts that

disclosure of this material would risk circumvention of law because individuals would know (1)

                                                42
which activities trigger a full investigation rather than a preliminary one; (2) the dates covered by

a particular investigation; and (3) CBP’s investigative techniques. See id.

       The Committee responds that Exemption 7(E) applies only to “information and

techniques that are secret and not generally known to the public.” Pl.’s Reply at 29. According

to the Committee, CBP’s summons authority is well known and therefore not eligible for

protection from disclosure. The Court disagrees. Even if the public knows of CBP’s authority

under § 1509, the Committee has not shown that the public knows anything about the finer

details of that authority, such as when and how CBP relies on it. Such information merits

protection from disclosure under Exemption 7(E). See Shapiro, 893 F.3d at 801 (affirming

nondisclosure of information in FBI database when the public knew of database’s capabilities

but agency’s “methods of managing the database [were] not generally known”); see also

Sussman v. U.S. Marshals Serv., 494 F.3d 1106, 1112 (D.C. Cir. 2007) (citing Blanton v. DOJ,

64 F. App’x 787, 788–89 (D.C. Cir. 2003) (explaining that exemption applies to “confidential

details of a program whose general contours [are] publicly known)).

       More, release of those details—the exact type of information covered by this category—

would divulge how CBP uses summonses to advance its mission. As CBP explains, potential

bad actors could easily use that information to identify deficiencies in the agency’s procedures

and adjust their behavior to avoid detection. Accord Sack v. DOJ, 823 F.3d 687, 694–95 (D.C.

Cir. 2016) (upholding nondisclosure when reports identified deficiencies in polygraph

procedures that “could enable criminal suspects, employees with ill intentions, and others to

subvert polygraph examinations”). CBP has therefore demonstrated a risk of circumvention of

law from disclosure of this information and has properly invoked Exemption 7(E).

                                                 43
       Similar reasons justify CBP’s withholding of FOIA002674–002767, which the Vaughn

Index identifies as a “chart from [OPR] detailing 1509 summons by [Special Agent in Charge]

and Date.” Vaughn Index at 77. The agency withheld this chart in full because it contains

information “on each ongoing or closed OPR investigation, whether summons was issued, and

what information was requested each time.” Howard 5th Decl. ¶ 16. The Committee argues that

disclosure of this chart will not risk circumvention of the law, but the Court disagrees. A person

who wished to avoid detection by CBP could use these details to assess and exploit CBP’s habits

in enforcement. The Committee briefly responds that the agency can redact information about

ongoing investigations. See Pl.’s MSJ at 40–41. But a potential criminal can glean the same

information about investigative techniques from past investigations as present ones. The agency

therefore properly invoked Exemption 7(E) to withhold this chart from disclosure.

       The Committee never meaningfully challenges the agency’s explanation of foreseeable

harm for this category. Nor could it. CBP identified that disclosure would give potential

criminals some very specific information, including what behaviors trigger a full investigation

and how CBP uses its summons authority to conduct investigations. See Howard 4th Decl. ¶ 62.

That explanation shows the risk of foreseeable harm from disclosure. And even if the agency’s

explanation were insufficient, the record reflects a risk of foreseeable harm. Reporters Comm., 3

F.4th at 372. The material at issue deals with sensitive issues of law enforcement procedure and

practice. The nature of that information would be a boon to potential criminals.

       The Court therefore agrees that CBP properly withheld under Exemption 7(E) the

information in Category 3.

                                                44
                                                  D.

       Finally, CBP must “demonstrate that all reasonably segregable material has been

released.” Johnson v. EOUSA, 310 F.3d 771, 776 (D.C. Cir. 2002). To meet this burden, the

agency can rely on the combination of its declarations and Vaughn Index. See id. The agency is

also “entitled to a presumption that [it] complied with the obligation to disclose reasonably

segregable material.” Sussman, 494 F.3d at 1117. To overcome that presumption, the

Committee must provide a “quantum of evidence.” Id.

       Here, CBP declares that it has released all reasonably segregable portions of the relevant

records. See Howard 4th Decl. ¶ 64. The agency noted that all withheld information is either

exempt or “not reasonably segregable.” Id. And according to the agency’s declaration, “CBP

analysts and attorneys reviewed each release of records line-by-line” to “determine[] whether

any segregable, non-exempt information could further be released.” Id.

       The Committee briefly argues that the agency’s one-paragraph explanation does not

satisfy its obligation. See Pl.’s MSJ at 22. But the Committee provides no evidence, much less a

“quantum,” that overcomes the presumption that the agency released all reasonably segregable

information. See Loving v. DOD, 550 F.3d 32, 41 (D.C. Cir. 2008). The Court accordingly finds

that the agency has fulfilled its segregability obligation.

                                                 IV.

       For these reasons, the Court will partially grant the Government’s Motion for Summary

Judgment and the Committee’s Motion for Summary Judgment. A separate order will issue.

                                                                            2021.10.18
                                                                            16:56:34 -04'00'
Dated: October 18, 2021                                TREVOR N. McFADDEN, U.S.D.J.

                                                  45