How Long Does a FOIA Request Take? Timeline + Tips
April 14, 2026·6 min read·Formly Team
What FOIA response times actually look like in 2026, agency by agency, plus practical tactics to get your records faster.
The statute says 20 business days. The reality is measured in months — and, for some agencies and some subjects, in years. The gap between the statutory deadline and actual practice is large enough that asking "how long will my FOIA take?" is a different question depending on which agency you're requesting from, how complicated the records are, and whether anything in your request gives the agency an excuse to pause the clock.
This guide walks through what to actually expect in 2026, why times vary so much, and the tactics that meaningfully shorten the wait.
What the law says
Under 5 U.S.C. § 552(a)(6)(A)(i), agencies must respond to a FOIA request within 20 business days — roughly a calendar month. They may extend that by another 10 business days in "unusual circumstances" (large volume, multiple offices involved, consultation needed with another agency).
Two important subtleties:
- "Respond" ≠ "produce records." A response can be a substantive determination (grant, partial grant, or denial). Agencies often hit the 20-day mark with an acknowledgment letter and assigned tracking number, then produce records weeks or months later. That's technically compliant with the deadline in many interpretations.
- The clock stops for fees and clarification. If you don't commit to paying fees or if the FOIA officer asks for clarification, many agencies pause processing until you respond.
So the statutory deadline is real, but the practical timeline is driven by backlog, not law.
What it actually takes, by agency
The numbers below are typical 2026 ranges based on each agency's own published data. They should be treated as rough ballparks — your specific request's complexity, scope, and subject matter matter more than any average.
| Agency | Simple request | Complex request |
|---|---|---|
| EPA | 1–3 months | 6–12 months |
| FCC | 1–2 months | 3–6 months |
| SEC | 1–3 months | 6–12 months |
| Department of State | 3–6 months | 12–36 months |
| DHS / USCIS | 2–6 months | 6–18 months |
| FBI | 3–9 months | 12–36 months |
| CIA | 6–18 months | 24 months+ |
| DOJ (OIP / components) | 2–6 months | 6–18 months |
"Simple" generally means a narrow request for a small, easily identified set of records. "Complex" means large volume, multiple offices, sensitive subject matter, third-party records, or records that require review by another agency.
The State Department, FBI, and CIA routinely take well over a year on substantive requests. That is the norm, not an error on their end.
Why requests take so long
Three structural reasons:
- Backlogs. Agencies receive hundreds of thousands of FOIA requests per year. Some have multi-year queues of older unprocessed requests. Your request joins the end of that line.
- Inter-agency consultation. If your records touch another agency's interests (classification, privacy, grand-jury material, foreign relations), the reviewing agency has to coordinate. Each consultation can add months.
- Review for exemptions. Every page has to be reviewed for each of the nine FOIA exemptions. For a 10,000-page production, that's real work.
Backlogs are the single biggest driver. An agency that's two years behind will take at least two years to process your request regardless of how well you wrote it.
Expedited processing: when it works
Expedited processing can move a request to the front of the queue — but the bar is high. Under 5 U.S.C. § 552(a)(6)(E), you need a "compelling need," which the statute and regulations define narrowly:
- An imminent threat to someone's life or physical safety, or
- An urgency to inform the public about actual or alleged federal government activity, and you are primarily engaged in disseminating information (journalism, broadly defined).
Some agencies also grant expedited processing for "loss of substantial due process rights" or for requests that attract widespread, exceptional media interest. Those are agency-specific add-ons, not statutory.
Practical notes:
- Expedited requests must be certified true and correct under penalty of perjury.
- Agencies must decide on the expedited request within 10 calendar days.
- Even when granted, "expedited" usually means "moved to the front of the expedited queue," not "processed in a week." The FBI, for example, has a separate expedited queue that itself has a wait.
When to request it
Expedited processing is worth asking for when you can credibly argue (and document) that the information is newsworthy, time-sensitive, and tied to federal government activity. Don't ask for expedited processing for academic research or internal interest — the agency will deny it and your request may go to the back of the regular queue.
Tactics that actually shorten the wait
Some of these matter more than the request itself.
1. Pick the right agency and component
A request addressed to "DOJ" gets forwarded to OIP and then to the component that actually holds the records — adding weeks. If you know the records live with the Antitrust Division or a specific U.S. Attorneys' Office, address the request directly. Same for EPA regions and FBI field offices.
2. Narrow, then widen later
A small, specific request gets processed quickly. An enormous request waits in the complex queue. File the small request first. Once records come back, file a second, more targeted follow-up using what you learned. This often beats one giant request.
3. Commit to paying fees up front
A request that doesn't address fees sits in the FOIA officer's inbox waiting for clarification. A line like "I agree to pay fees up to $25; please notify me before exceeding this amount" removes that pause.
4. Answer clarification calls quickly
If the FOIA officer calls or emails asking for scope narrowing or a fee-agreement confirmation, answer the same day. Requests flagged as "awaiting requester response" get dropped from active processing until you reply.
5. Use online portals, not mail
Mailed requests get opened by hand, triaged, scanned, and entered into tracking systems — slow. Agency online portals and FOIA.gov move the request directly into the processing queue and give you a tracking number immediately.
6. Follow up politely at 25 business days
At 20 business days, the statutory deadline has passed. A short, polite email citing 5 U.S.C. § 552(a)(6)(A)(i) and asking for a status update often surfaces an answer within a day.
7. Appeal denials — it works more often than you'd think
If the request is denied or only partially granted, appeal. Appeals go to a different office within the same agency (typically a general counsel or public-liaison office). They are free, and they reverse or narrow the initial decision often enough that it's almost always worth filing one.
Realistic planning
If your project depends on the records, build the timeline around real FOIA response times — not the statutory 20 days. A good rule of thumb:
- 3 months for a simple, well-targeted request to a moderately fast agency (FCC, EPA, SEC).
- 6–9 months for anything involving the FBI, State, or USCIS, absent expedited processing.
- 12+ months for complex, multi-component, or classified subject matter.
Plan your reporting, research, or litigation schedule around those bands and file early.
If time really matters
Expedited processing, a well-targeted request to the right component, and quick responses to clarification calls are the three levers that most shorten the wait. If the timeline is genuinely critical — a court deadline, a publishing schedule, a policy comment window — combining all three is typically the difference between getting records in months versus years.
Related posts
FOIA Request Template: Free Examples for Every Agency
A free, agency-ready FOIA request template plus tailored examples for the DOJ, FBI, and EPA. Includes fee-waiver and expedited-processing language.
How to File a FOIA Request: Complete Guide (2026)
A step-by-step walkthrough of filing a Freedom of Information Act request in 2026 — what to include, how to pick the right agency, and the mistakes that get requests denied.