Federal Judge Confirms Agencies’ FRA Record Recovery Efforts Must Include Reaching Out to Third-Party Email Providers

Last Friday, Judge Trevor McFadden of the U.S. District Court for the District of Columbia granted the federal government’s second motion to dismiss a lawsuit to compel Secretary of State Mike Pompeo and U.S. Archivist David Ferriero to fulfill their statutory obligations under the Federal Records Act (“FRA”) to recover former Secretary of State Colin Powell’s work-related email records from a personal account hosted by AOL, Inc.  Cause of Action Institute (“CoA Institute”) filed the lawsuit in October 2016 after then-Secretary John Kerry and Archivist Ferriero failed to act on CoA Institute’s FRA notice and Freedom of Information Act (“FOIA”) request.

Although Judge McFadden’s dismissal is a technical defeat, albeit on procedural grounds, CoA Institute’s work in this case, and in another FRA case involving Hillary Clinton, is still a success.  Taken together, these cases have the raised the bar for what federal agencies must do when records go missing.  In future cases, agencies will be required, at the least, to reach out directly to third-party email providers in an attempt to recover work-related email records and may not rely on self-serving statements from agency officials that such records no longer exist.

In the recent motion, the government again sought dismissal on mootness grounds, arguing that Secretary Powell no longer had access to the account he used during his tenure at the State Department and, moreover, it would be “technologically impossible” for AOL to recover any records from its servers.  Correspondence from Secretary Powell and various AOL employees was used to support the government’s claims.  But the agency reached out to Secretary Powell and AOL only after Judge McFadden rejected a similar motion to dismiss in January 2018, holding that there was still a “substantial likelihood,” based on the record, that Secretary Powell’s work-related email could be recovered if the State Department were to leverage the full law enforcement authority of the federal government.  Judge McFadden looked to the Department of Justice’s successful recovery of former Secretary Hillary Clinton’s email from computer hard drives and mobile devices as a guide.

In opposition to the government’s second motion, and in support of its own motion for summary judgment, CoA Institute argued that the government had failed to provide enough evidence to establish fatal loss of the email records at issue, particularly since Secretary Pompeo and Archivist Ferriero continued to refuse to involve the Attorney General in compulsory or forensic recovery efforts.

This time around, however, the judge was convinced that the government had done enough and additional efforts would be “pointless.”  Nevertheless, in future cases, agencies will need to undertake substantial efforts to prove fatal loss, even if that means contacting third-party commercial communications providers to determine the recoverability of records on their servers or networks.

The alienation of federal records will likely continue with the fast-paced development of technology and alternative means of communication within the federal bureaucracy.  CoA Institute is committed to ensuring that the law follows these developments and holds government employees accountable.

Ryan Mulvey is Counsel at Cause of Action Institute.

What Happens When Government Emails are Allegedly “Fatally Lost”?

President Trump’s phone and email behavior are coming under scrutiny for security reasons, but regardless of the device used, the type of email account being used could be a bigger concern.  Did you know that a government official’s use of private email to conduct government business is wrong?  If the Hillary Clinton email scandal didn’t showcase that, consider one of our recent and ongoing investigations into former Secretary of State Colin Powell’s work-related email records, which were hosted on a personal AOL account.

In September 2016, the House Oversight & Government Reform Committee held a hearing at which then-Under Secretary of State Patrick Kennedy testified that the State Department had undertaken minimal efforts to retrieve Powell’s work-related email.  In October 2016, Cause of Action Institute sought access to Secretary Powell’s work-related emails under the Freedom of Information Act (“FOIA”).  At the same time, we advised the Secretary of State and the Archivist of the United States of their obligations under the Federal Records Act (“FRA”) to recover those same email records.  Once it became apparent that the State Department would not respond to our FOIA request, and the obligation to initiate action through the Attorney General for the recovery of Secretary Powell’s work-related email would not be met, we filed suit in federal district court.  In January 2018, when the court denied the government’s first motion to dismiss, it described the State Department’s efforts at recovery as “anemic.”  As we’ve noted, U.S. District Court Judge Trevor McFadden explained that “[t]he Defendants’ refusal to turn to the law enforcement authority of the Attorney General is particularly striking in the context of a statute with explicitly mandatory language.”  “[T]here is a substantial likelihood that [CoA Institute’s] requested relief would yield access to at least some of the emails at issue.”

After being repeatedly asked by the National Archives and Records Administration (“NARA”) to contact AOL directly for Powell’s emails, the State Department never did so until CoA Institute filed its lawsuit.  But the State Department continues to use the line that the emails have been “fatally lost” and that our lawsuit should therefore be dismissed.  The Defendants argue that, even if they cannot prove fatal loss or completely recover unlawfully removed records, their obligation to initiate action through the Attorney General (and thus marshal the law enforcement authority of the federal government) can be excused if they have no “reason to believe” records are recoverable.

We’re currently pushing back on that argument, as it rests on a fundamental misapprehension of the FRA.  We have asked the court to order the Secretary of State and the U.S. Archivist to initiate action through the Attorney General for the recovery of Powell’s email, as required by law.  This would entail enlisting the law enforcement authority of the federal government to investigate the possibility of forensically recovering the records at issue, among other things.  Such techniques have been successful in previous cases of unlawfully removed federal records, as evidenced by Hillary Clinton’s email scandal and the FBI’s recovery of Peter Strzok and Lisa Page’s text messages.

The problem with the Defendants’ position is that it ignores the clear text of the FRA and thirty years of precedent, which recognizes a non-discretionary obligation for an agency head to go to the Attorney General whenever its own recovery efforts have failed.  In this last line of their closing brief, the Defendants sum up their argument: “We recognize that the Court has previously rejected the contention that the FRA requires referral only when an agency has reason to believe that records can be recovered but respectfully reserve the right to seek further review should the Solicitor General determine that such review is warranted.”

This case illustrates how careless the federal government can be with the protection of government work – the use of a personal account and the subsequent years-long legal battle to recover Secretary Powell’s work-related emails are a failure of our government to follow both the FRA and the FOIA.  Secretary Powell should never have used a personal email account, and the State Department should have acted quicker to recover and preserve vital records of government business that were stored on a third-party commercial server.  If it is this difficult to recover materials that ultimately belong to the American people, the work of the government becomes more and more opaque and the gap between the American people’s knowledge and the federal government’s behavior only widens.

Mary Beth Gombita, Cause of Action Institute.

CoA Institute Files Reply in Support of Motion to Order Enforcement Action in Colin Powell Email Case

Washington, D.C. – Cause of Action Institute (“CoA Institute”) today filed a reply in support of its motion for summary judgment in a lawsuit that seeks to compel Acting Secretary of State John Sullivan and U.S. Archivist David Ferriero to fulfill their non-discretionary obligations under the Federal Records Act (“FRA”).  Specifically, CoA Institute has asked the Court to order Sullivan and Ferriero to initiate action through the Attorney General for the recovery of former Secretary of State Colin Powell’s work-related email records, which were hosted on a personal AOL account.  The brief also argues in opposition to Defendants’ recent motion to dismiss on grounds that Secretary Powell’s email has been “fatally lost.”

“Defendants have failed to undermine any element of CoA Institute’s motion for summary judgment,” the brief reads.  “The evidence they offer in support of their mootness claim does not establish fatal loss.  The record before the Court instead highlights Defendants’ complete refusal to turn to the law enforcement authority of the federal government or to investigate the possibility of forensically recovering the records at issue.”

CoA Institute President John Vecchione: “The Federal Records Act leaves Executive Branch officials no room for discretion in choosing when to recover unlawfully removed federal records. When an agency attempts to recover such records on its own, and those efforts prove ineffectual, the agency must go to the Attorney General.  The government bears a heavy burden in trying to avoid this obligation by establishing the ‘fatal loss’ of the records.  That burden has not been met here.”

Background

CoA Institute filed its lawsuit in October 2016. In January 2018, the court rejected the government’s motion to dismiss the lawsuit because of the State Department’s weak efforts at recovery of the emails in question. “The Defendants’ refusal to turn to the law enforcement authority of the Attorney General is particularly striking in the context of a statute with explicitly mandatory language,” U.S. District Court Judge Trevor McFadden opined.  “[T]here is a substantial likelihood that [CoA Institute’s] requested relief would yield access to at least some of the emails at issue.”

In September 2016, the House Oversight & Government Reform Committee held a hearing at which then-Under Secretary of State Patrick Kennedy testified that the State Department had undertaken minimal efforts to retrieve Powell’s work-related email.  After learning that Powell no longer had access to his AOL account or its contents, the State Department merely asked Powell to contact AOL to see if anything could be retrieved.  Despite a request from the National Archives and Records Administration (“NARA”) to contact AOL directly, the State Department never did so.  Ultimately, the agency relied on unreliable hearsay—namely, the reported representations of Secretary Powell’s personal secretary about an apparent phone conversation between someone at AOL and a staff member of the House Oversight Committee—to conclude that no records could be recovered.

—-  CoA Institute’s memorandum in support of its motion can be read here.

—-  CoA Institute’s reply brief can be read here.

About Cause of Action Institute

Cause of Action Institute is a 501(c)(3) non-profit working to enhance individual and economic liberty by limiting the power of the administrative state to make decisions that are contrary to freedom and prosperity by advocating for a transparent and accountable government free from abuse.

For more information, please contact Mary Beth Gombita, mbgcomms@gmail.com.

CoA Institute Asks Court to Order Enforcement Action in Colin Powell Email Case

Washington, D.C. – Cause of Action Institute (“CoA Institute”) today filed a motion for summary judgment in a lawsuit that seeks to compel Secretary of State Rex Tillerson and U.S. Archivist David Ferriero to fulfill their non-discretionary obligations under the Federal Records Act (“FRA”).  Specifically, CoA Institute has asked the court to order Tillerson and Ferriero to initiate an enforcement action through the Attorney General to recover the work-related email records of former Secretary of State Colin Powell from a personal account hosted by AOL, Inc.

“To date, Defendants have undertaken meagre recovery efforts that have proven entirely ineffectual,” argued CoA Institute.  “None of Secretary Powell’s work-related email records have been recovered.  And Defendants have not proven their fatal loss—the only exception in this case that would excuse their intransigence.  Now is the time to involve the Attorney General, the highest law enforcement authority of the federal government, as contemplated and required by the FRA.”

CoA Institute filed its lawsuit in October 2016 after then-Secretary John Kerry and Archivist Ferriero failed to act on CoA Institute’s FRA notice and Freedom of Information Act request.  Just last month, CoA Institute successfully defended its claims against the government’s motion to dismiss.  In denying that motion, U.S. District Court Judge Trevor McFadden highlighted the State Department’s “anemic” recovery efforts and its seeming disregard for the power of leveraging the law enforcement authority exercised by the Attorney General in recovering government records.

Cause of Action Institute President and CEO John J. Vecchione: “Executive Branch officials have no discretion in choosing when to recover unlawfully removed federal records.  For too long, agency leadership—particularly at the State Department—has not been held accountable for its failure to abide by federal record management laws.  Secretary Colin Powell conducted official government business on a private email account; records of his correspondence belong to the federal government and should have been retained for permanent preservation.  We are confident that the law requires more effort to recover the records at issue, including the initiation of an enforcement action through the Attorney General.”

Background

In September 2016, the House Oversight & Government Reform Committee held a hearing at which then-Under Secretary of State Patrick Kennedy testified that the State Department had undertaken minimal efforts to retrieve the work-related emails of Colin Powell.  After learning that Powell no longer had access to his AOL account or its contents, the State Department merely asked Powell to contact AOL to see if anything could be retrieved.  Despite a request from the National Archives and Records Administration (“NARA”) to contact AOL directly, the State Department never did so.  Ultimately, the agency relied on unreliable hearsay—namely, the reported representations of Secretary Powell’s personal secretary about an apparent phone conversation between someone at AOL and a staff member of the House Oversight Committee—to conclude that no records could be recovered.

CoA Institute’s memorandum in support of its motion can be read here.

State Department Motion to Dismiss Denied in Colin Powell Email Case

Washington, D.C. – U.S. District Court Judge Trevor McFadden has denied the federal government’s motion to dismiss a lawsuit to compel Secretary of State Rex Tillerson and U.S. Archivist David Ferriero to fulfill their statutory obligations under the Federal Records Act (“FRA”) to recover former Secretary of State Colin Powell’s work-related email records from a personal account hosted by AOL, Inc.  Cause of Action Institute (“CoA Institute”) filed the lawsuit in October 2016 after then-Secretary John Kerry and Archivist Ferriero both failed to act on CoA Institute’s FRA notice and Freedom of Information Act (“FOIA”) request.

Although the government argued it had no reason to believe that copies of Colin Powell’s email records still existed and were recoverable from AOL servers, Judge McFadden rejected that conclusion, describing the State Department’s recovery efforts as “anemic,” particularly in light of the fruitful “leveraging” of law enforcement authority in the case of former Secretary Hillary Clinton.  “The Defendants’ refusal to turn to the law enforcement authority of the Attorney General is particularly striking in the context of a statute with explicitly mandatory language,” Judge McFadden opined.  “[T]here is a substantial likelihood that [CoA Institute’s] requested relief would yield access to at least some of the emails at issue.”

Cause of Action Institute President and CEO John J. Vecchione: “Agencies must take their responsibility to secure federal records seriously. For too long, agencies have allowed federal employees to use personal email accounts without ensuring those records are recovered and maintained in accordance with the law.  We are encouraged that the court recognized that agencies must do more to recover lost records.”

In September 2016, the House Oversight & Government Reform Committee held a hearing at which then-Under Secretary of State Patrick Kennedy testified that the State Department had undertaken minimal efforts to retrieve Colin Powell’s work-related email.  After learning that Powell no longer had access to his AOL account or its contents, the State Department merely asked Powell to contact AOL to see if anything could be retrieved.  Despite a request from the National Archives and Records Administration (“NARA”) to contact AOL directly, the State Department never did so.  Ultimately, the agency relied on unreliable hearsay—namely, the reported representations of Colin Powell’s personal secretary about an apparent phone conversation between someone at AOL and a staff member of the House Oversight Committee—to conclude that no records could be recovered.

Following yesterday’s ruling on the motion to dismiss, the government Defendants must now either comply with their non-discretionary obligations under the FRA, which requires them to initiate action through the Attorney General to recover unlawfully removed records, or they must proffer new evidence to prove the “fatal loss” and irrecoverability of Colin Powell’s email records from AOL servers.

Judge McFadden’s opinion can be accessed HERE.

For information regarding this press release, please contact Zachary Kurz, Director of Communications at CoA Institute: zachary.kurz@causeofaction.org.

Federal Records Law Must Keep Pace with Evolving Technology

Technology develops faster than law.  This maxim has implications across society, but one place it has particular purchase is in federal recordkeeping and the public’s right to access government information.  The two primary federal statutes that require government to preserve records and then allow the public to access those records are the Federal Records Act (“FRA”) and the Freedom of Information Act (“FOIA”).  Federal agencies, unfortunately, do not always live up to their obligations under these laws and government-oversight organizations turn to the courts to seek relief.  The public’s right to sue under the FOIA is well established.  However, courts rarely compel agencies to fulfil their FRA obligations.  My organization, Cause of Action Institute (“CoA Institute”), is currently involved in two important FRA lawsuits that may shape the future of agency obligations under the FRA for decades to come, as information technologies continue to change.

Both lawsuits arose from Secretaries of State failing to preserve their emails in compliance with the Federal Records Act.  Former Secretary Hillary Clinton’s email travails are well catalogued.  But former Secretary Colin Powell also used a non-governmental email account to conduct official government business.  The factual difference between these two cases is that while Secretary Clinton primarily used a personal email service with a server in her basement, Secretary Powell used an AOL account.  But Secretary Clinton also used a BlackBerry email account for the first two months of her tenure as Secretary of State.  So, from these two cases the same legal issue arises: what is an agency’s FRA obligation to recover unlawfully removed federal email records that are housed on commercial email servers?

This question is important to the future of federal recordkeeping law and public access to information because we are already seeing an explosion of non-email methods of electronic communication.  Some of these methods of communication store information locally, such as on a phone or computer, and some store them on commercial servers.  For example, FOIA requesters have been battling for access to text messages for years, agency employees use various forms of instant messaging while at work, and we’ve now seen the rise of the surreptitious use of phone applications such as Signal and Confide that do not always preserve the communications.

In Armstrong v. Bush, the D.C. Circuit recognized two cognizable private rights of action under the Federal Records Act.  First, a plaintiff may bring a case against an agency if that agency does not have the requisite recordkeeping policies in place or if the policies are insufficiently clear so that an employee does not know what type of records he is required to save.  Second, a plaintiff may bring a case to compel the head of an agency or the Archivist of the United States to recover records that have been unlawfully removed from the agency.  If the agency head or Archivist is either unable or unwilling to perform that duty, then the FRA requires them to “initiate action through the Attorney General for the recovery” of those records.  To our knowledge, no such referral to the Attorney General has ever occurred.

At stake in CoA Institute’s Clinton and Powell cases is whether a plaintiff can force the agency head and Archivist to refer the matter to the Attorney General when, through their own actions, they have failed to recover all the missing records.  In both cases the State Department asked representatives of Secretaries Clinton and Powell to recover the unlawfully removed records and return them to the agency for historical preservation and for response to FOIA requests.  In both cases those representatives responded that they were unable to obtain copies of the records that were housed on BlackBerry and AOL servers, respectively.  The State Department and Archivist have responded in the ongoing suits that those efforts are sufficient and that they are not required to use legal process or refer the matter to the Attorney General for more forceful efforts at record recovery.

CoA Institute’s case related to Secretary Clinton has already been to the D.C. Circuit once and the appellate court held that the agency is only absolved of its Federal Records Act obligations if it can establish the “fatal loss” of the records in question.  The State Department and Archivist have not made a sufficient affirmative showing that BlackBerry, and AOL in the case of Secretary Powell, do not have, and cannot recover, these email records.  They have offered no statements from either company or detailed efforts by those companies to recover and return the federal records.

Whether the district court compels the current Secretary of State and Archivist to make such an affirmative showing or requires them to refer the matter to the Attorney General for him to attempt record recovery could set an important precedent.  This decision will shape the future of agency responsibilities under the Federal Records Act and the public’s ability to have access to its government’s information as communications technology continues to change.

James Valvo is counsel and senior policy advisor at Cause of Action Institute.  He is counsel in both cases discussed in this article.  You can follow him on Twitter @JamesValvo.

Government Obligated to Recover Colin Powell’s Emails

Washington, DC – Cause of Action Institute (“CoA Institute”) today filed its opposition to the government’s motion to dismiss a lawsuit to compel Secretary of State Rex Tillerson and U.S. Archivist David Ferriero to fulfill their statutory obligations to recover former Secretary of State Colin Powell’s work-related email records from a personal account hosted by AOL, Inc.  CoA Institute filed the lawsuit in October 2016 after then-Secretary John Kerry and Archivist Ferriero both failed to act on a CoA Institute Federal Records Act (“FRA”) notice and Freedom of Information Act (“FOIA”) request.

Cause of Action Institute President and CEO John Vecchione: “The law requires an agency or the Archivist to initiate action through the Attorney General to recover unlawfully removed records, especially when initial remedial efforts have failed.  This is a mandatory obligation that cannot be sidestepped.  Whether AOL no longer has Secretary Powell’s email records in its systems is unproven.  More importantly, the government cannot point to any evidence that more intensive, forensic recovery methods—like those employed in the case of Secretary Clinton—might lead to the recovery of these important and historically-vital State Department records.”

In September 2016, the House Oversight & Government Reform Committee held a hearing at which then-Under Secretary of State Patrick Kennedy testified that the State Department had undertaken minimal efforts to retrieve Powell’s work-related email.  After learning that Powell no longer had access to his AOL account or its contents, the State Department merely asked that Powell contact AOL to see if anything could be retrieved.  Despite a request from the National Archives and Records Administration (“NARA”) to contact AOL directly, the State Department never did so.

The government now argues the case should be dismissed because CoA Institute cannot show that involving the Attorney General will result in the recovery of Powell’s email.  That argument is faulty on both the law and the facts.  As to the law, the government confuses the nature of an agency head’s non-discretionary obligation under the FRA, which requires it to initiate action through the Attorney General to recover unlawfully removed records.  This requirement is all the more important when an agency’s or the Archivist’s remedial recovery efforts have proven fruitless.

Though the State Department and NARA exerted minimal effort to recover Powell’s email records, they failed.  Moreover, the government has yet to prove that the Attorney General could not achieve that recovery.  Many State Department officials believed that federal records that had been deleted from Secretary Hillary Clinton’s private email server were unrecoverable, for example, but the FBI retrieved many of those records using forensic techniques.  The same could be done here, assuming AOL cannot in fact access or recover Powell’s records through less intensive means.

Although the government argues that Powell’s email records are no longer in AOL’s system, that allegation depends on unreliable hearsay.  The State Department relies on the representations of Powell’s secretary, but an email uncovered by CoA Institute through FOIA shows that this representative received only vague details about an apparent phone conservation between someone at AOL and a staff member of the House Oversight Committee, during the course of which the unnamed AOL employee indicated that AOL no longer had Powell’s email.  The details of the phone call, the exact content of the representations made, and the reasons for why AOL reached the conclusion it did are all unclear, but even assuming the truth of the claim, it does not speak to the ability of the government to recover Powell’s email through other means.

Cause of Action Institute’s opposition brief can be accessed HERE.