ISBA Development Site
This website is for ISBA staff use only. All visitors should return to the main ISBA website.
This website is for ISBA staff use only. All visitors should return to the main ISBA website.
It is not very often that an opinion thoroughly discussing the application of the Freedom of Information Act is published. On February 2, 2006, however, the Illinois Supreme Court issued such an opinion in Southern Illinoisan v. Illinois Department of Public Health.1
Introduction
As I am sure you are aware, the Freedom of Information Act (the Act or FOIA) provides a mechanism for someone to obtain copies of documents or records used and maintained in the course of business by a governmental entity or agency in the State of Illinois.2 Of course, this disclosure requirement is subject to specific exemptions.3 The Southern Illinoisan case discusses the exemption for disclosing information specifically prohibited from disclosure by state law and the Illinois Health and Hazardous Substances Registry Act’s (Registry Act) prohibition from disclosing certain information. Although the case discusses a specific statute, there are many points of discussion by the Supreme Court important to any attorney advising his or her client on FOIA compliance.
The Case
The Southern Illinoisan is a daily newspaper published in Carbondale, Illinois (Plaintiff). The Plaintiff submitted a request for records, pursuant to the FOIA, to the Illinois Department of Public Health (Department) requesting data maintained in the Illinois Health and Hazardous Substances Registry (Cancer Registry).4 The specific data requested was: “type of cancer, zip code and date of diagnosis” to be delivered in this format.5 The Department denied the request and the denial was upheld by the Department Director.6 Subsequently, the Plaintiff filed a complaint in the circuit court seeking review of the Department’s denial.7 While there was a long procedural road before the case reached the Illinois Supreme Court; the Supreme Court identified one question which was the subject of the appeal before them:
whether the information requested from the Department by plaintiff pursuant to FOIA “tends to lead to the identity” of patients listed in the Cancer Registry, thereby violating section 4(d) of the Registry Act.8
The Department’s main argument for claiming that the information was exempt under FOIA was that the Registry Act prohibits the disclosure of information which reveals the identity, or any group of facts which tends to lead to the identity, of any person whose condition is submitted to the Cancer Registry.9
In support of their denial, the Department argued that because the Registry Act prohibits disclosure, the information is exempt under section 7(1)(a) of FOIA.10 The Department relied on the expert testimony of Dr. Latanya Sweeney to establish that the identity of persons could be determined from the data set requested. Dr. Sweeney is a professor of computer science and public policy at Carnegie Mellon University and is the director of the University’s Laboratory for International Data Privacy.11 Dr. Sweeney testified that she conducted an experiment to determine if persons listed on the Cancer Registry could be identified from only the three information fields requested by Plaintiff. She compared this data with information readily available to the general public. Using a personal computer and traditional software database, Dr. Sweeney was able to re-identify with a single correct name 18 of 20 sets of data provided—this corresponded to correctly identifying Cancer Registry names 80-87 percent of the time.12
The Department argued that it was this uncontested evidence that the Cancer Registry information requested by the Plaintiff tends to lead to the identity of cancer patients.13 And, as a result, disclosure of type of cancer, date of diagnosis and ZIP Code violates section 4(d) of the Registry Act and is therefore exempt under section 7(1)(a) of FOIA.
The Court’s Analysis
The Supreme Court noted that Dr. Sweeney’s testimony also indicated that in order to accurately arrive at the 18 of 20 names listed in the Cancer Registry she used a multi-step process. She studied neuroblastoma,14 she purchased and used several publicly available data sets, costing about $2,000. To obtain these data sets she had to complete proper forms, wait for the requests to be processed, and receive the data in the mail in CD-format. She also testified that she had to scrutinize the data sets to identify common factors for neuroblastoma cases, and at one point when she had discovered she made a mistake went back and focused on another factor. She then gathered information from other on-line sources, as well as from libraries and newspaper articles. Dr. Sweeney concluded that it was her opinion that “it is very easy to identify persons from the Cancer Registry using public data sets.”15
The Court rejected the construction the Department sought citing to the public policy of the FOIA regarding open and accessible public records. The Court concluded that information in the Cancer Registry “tends to lead to the identity” of Cancer Registry patients only if that information can be used by the “general public to make those identifications.”16 Further, the Court discussed the fact that the Department’s expert had years of experience, specific knowledge of data systems and the ability to adeptly manipulate data; but, her testimony failed to establish that the general public could recreate what she accomplished. And, the Department did not adduce competent evidence of whether a non-expert could perform the procedure followed by its expert to identify Cancer Registry patients.17 Dr. Sweeney’s conclusion that the general public could identify Cancer Registry patients was not supported by proof.18 Rather, the Court concluded that Dr. Sweeney’s testimony supports the determination that her methodology was unique to her education, training and experience, and not easily duplicated by the general public.19
Further, the Court noted that the Department did not demonstrate that the release of the Cancer Registry information requested by Plaintiff “tended to lead to the identity of the specific persons described in the data” and as such did not meet the burden under FOIA to establish that the requested material was exempt. Finding that in the absence of more definitive proof that members of the general public would have the ability to duplicate Dr. Sweeney’s multi-step experiment, the Court relied on public policy to guide its analysis. The FOIA “encourages a free flow and disclosure of information between government and the people” and it is to be interpreted liberally, and the exemptions interpreted narrowly.20
Based on this analysis, the Court upheld the trial court’s order instructing the Department to disclose the information in the FOIA request.21
Conclusion
The Southern Illinoisan case reaffirms that courts hold public policy considerations in high regard when reviewing FOIA cases. Also, when exemptions are applied that look at the ability to identify the exempted information, the determination will be based on the general public’s ability . . . not that of an expert.
__________