Background
After the April 2025 arson attack and security breach at the Pennsylvania Governor’s Residence, the Pennsylvania State Police and Governor’s Office retained former State Police Commissioner Jeffrey B. Miller to conduct an independent security review. David Osborne and the Commonwealth Foundation requested the resulting report and related communications under Pennsylvania’s Right-to-Know Law.
The Governor’s Office denied access under exemptions protecting personal security, public-safety activity, and building infrastructure. The Office of Open Records directed the Office to submit the records for confidential review but later accepted the Office’s position without examining the material, despite recognizing that the report might contain both sensitive information and general implementation instructions. It denied the requesters’ appeal in full.
The Commonwealth Court ordered the unredacted records submitted for its own in camera review. That record included the consultant’s report and an email discussing it. As the ultimate factfinder in appeals involving Commonwealth agencies under the RTKL, the court reviewed the exemptions and the records de novo.
The Court’s Holding
In a nonprecedential memorandum, Judge Wallace reversed the Office of Open Records. The OOR abused its discretion by failing to enforce its own in camera order when the agency’s descriptions indicated that segregable, nonsensitive material could exist. RTKL exemptions are construed narrowly, and an agency must prove that withheld information actually falls within an asserted exemption rather than rely on broad characterizations.
The court concluded that the email did not reveal operational vulnerabilities or otherwise pose a safety risk and ordered it disclosed. The report required a more granular result. Portions describing security operations, weaknesses, recommendations, and public-safety concerns could be redacted under the personal-security, law-enforcement/public-safety, and infrastructure exemptions. But the exemptions did not cover general geographic information, publicly known details about the residence, visitor hours, public renovations, general Harrisburg crime data, or headings that revealed no sensitive substance.
The court directed the Governor’s Office to provide the email and a redacted report within 14 days, following the page-specific instructions in the opinion. The ruling did not require release of the security blueprint or sensitive operational recommendations. Instead, it enforced the RTKL’s requirement to disclose reasonably segregable public material while protecting information whose release would create a demonstrable safety risk.
Key Takeaways
- An agency cannot withhold an entire mixed record merely because significant portions qualify for RTKL security exemptions.
- The Office of Open Records should enforce in camera production when the record may contain segregable public and exempt information.
- General, publicly available, or nonsensitive contextual material must be separated from operational security assessments and vulnerabilities.
- The Commonwealth Court may act as factfinder, inspect unredacted records, and prescribe specific redactions in RTKL appeals involving Commonwealth agencies.
Why It Matters
Osborne is a practical Pennsylvania RTKL decision about high-stakes records. It recognizes the obvious need to protect officials and government facilities after a violent attack, while rejecting an all-or-nothing approach to a document that combines sensitive analysis with public background. Agencies should create a defensible redaction log and evaluate each section rather than invoke security at the document level.
For requesters, the case shows the value of pressing segregation and in camera review when an agency’s own description suggests mixed content. For government counsel, it illustrates that strong security interests are best protected through specific evidence and targeted redactions. The court’s remedy preserves operational secrecy while still allowing public scrutiny of the review’s nonsensitive framework and context.
The page-by-page review mattered because the Office invoked several related exemptions across the report. The court accepted that detailed assessments could threaten officials, officers, visitors, and the facility, particularly after an actual attack. Yet danger in one section did not establish that neutral history, public links, broad statistics, or administrative context posed the same risk. Requesters should identify likely public portions and expressly seek redaction rather than frame disclosure as an all-or-nothing choice.
The decision also reinforces the reviewing bodies’ distinct roles. OOR may require confidential production to test an agency’s proof, and it should not abandon that process when the claimed exemption cannot be assessed from an affidavit alone. On judicial review, the Commonwealth Court’s broad scope permits it to examine the records and enter a disclosure remedy that brings the dispute to a practical conclusion for requesters and agencies alike.