Background
In January 2019, Ryan Baugh applied for a security clearance with the Central Intelligence Agency to access classified materials on behalf of his government contracting employer. Six months later, the CIA denied the application based on his past use of controlled substances. The agency provided Baugh with a redacted investigation file, withholding his identifying information and several pages of officers’ notes, citing Executive Order 12,968 and policies implementing the Freedom of Information Act and Privacy Act.
Over the following year, Baugh repeatedly requested the complete, unredacted file, but the CIA continued redacting the reviewing officers’ notes. Rather than pursue the administrative review process the CIA repeatedly offered, Baugh filed suit in federal district court seeking an injunction and writ of mandamus to compel disclosure of the unredacted file. The district court dismissed the lawsuit for failure to state a claim, prompting Baugh’s appeal.
The Court’s Holding
The Sixth Circuit affirmed the dismissal. The court held that Baugh failed to state a claim under the Administrative Procedure Act or Mandamus Act because he possessed an adequate alternative remedy: direct claims under FOIA and the Privacy Act, both of which provide for injunctive relief to compel agency disclosure of improperly withheld records.
The court emphasized that Executive Order 12,968 and its implementing guidance explicitly disclaim creating enforceable rights against the United States. They merely restate FOIA and Privacy Act obligations already imposed by Congress. Accordingly, the CIA’s redactions were lawful under existing statutory exemptions, and those same statutes provided Baugh’s adequate legal remedy. The court rejected Baugh’s argument that he must exhaust administrative review before bringing FOIA or Privacy Act claims, finding no such exhaustion requirement in the statutes. It also upheld the denial of jurisdictional discovery, finding his complaint adequately established the court’s jurisdiction.
Key Takeaways
- FOIA and the Privacy Act provide adequate alternative remedies, barring APA and mandamus claims challenging agency redactions in security clearance investigations.
- Executive Order 12,968 creates no independent enforceable rights; it merely restates statutory FOIA and Privacy Act obligations.
- No exhaustion requirement exists requiring applicants to complete administrative review before pursuing FOIA or Privacy Act claims for investigative file disclosure.
- Procedural inconvenience in pursuing an adequate legal remedy does not render that remedy inadequate.
Why It Matters
This decision establishes that FOIA and the Privacy Act are the exclusive procedural frameworks for challenging agency redactions in security clearance investigations, even when executive orders appear to promise additional protections. Applicants denied security clearances cannot circumvent these statutory procedures by invoking the Administrative Procedure Act or mandamus relief through claims based on executive orders or agency policy.
For federal agencies, the ruling validates implementing executive orders in ways that explicitly preserve and reinforce existing statutory frameworks rather than creating new rights. It also reinforces that an applicant’s procedural choices—such as pursuing administrative remedies for years before filing suit—do not create equitable grounds for courts to expand available legal remedies beyond congressional authorization.