OPINION
This is a Freedom of Information Act (“FOIA”) case concerning a request for documents about individuals who reported to the U.S. Department of Housing and Urban Development (“HUD”) their suspicions that Prudential Locations LLC (“Prudential”), a real estate company, was violating the law. HUD produced the documents, but redacted the two of them at issue here to conceal information that identified the complaining individuals. In defense of the redactions, HUD asserted, and the district court agreed, that the redactions were justified pursuant to FOIA Exemption 6, which allows an agen
*770
cy to withhold “personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy.” 5 U.S.C. § 552(b)(6);
see Prudential Locations LLC v. HUD,
Under the case law, Exemption 6 requires courts to balance the personal privacy interests protected by the exemption against the public interest furthered by disclosure.
See Lahr v. Nat’l Transp. Safety Bd.,
I
HUD is responsible for administering and enforcing the Real Estate Settlement Procedures Act (“RESPA”), 12 U.S.C. §§ 2601-2617. One of the purposes of RESPA is to “eliminat[e] ... kickbacks or referral fees that tend to increase unnecessarily the costs of certain settlement services.” 12 U.S.C. § 2601(b)(2). To achieve that purpose, the act prohibits, among other things, giving or accepting “fee[s], kick-back[s] or thing[s] of value” for referring “business incident to or a part of a real estate settlement service involving a federally related mortgage loan.” Id. § 2607(a). The documents at issue here are two communications notifying HUD of suspected violations of RES-PA’s prohibitions on kickbacks and referral fees.
The first document is a short letter dated July 7, 2003 (the “2003 Letter”). The letter averred that “Prudential Locations Real Estate Salespersons get monetary kickbacks ($$,$$$) for the amount of business that is referred to Wells Fargo.” Attached to the letter was an article from the Honolulu Star-Bulletin purportedly supporting the allegations. The informant did not expressly request an investigation, but did ask: “Is it a violation of RESPA for real estate agents to receive compensation for steering business to a specific Lender?” The author of the letter neither requested anonymity nor affirmatively authorized release of his name.
Based on that letter, HUD initiated an investigation into Prudential’s business practices, ultimately confirming the informant’s allegations. HUD found Prudential had violated RESPA by giving valuable things, including expensive vacation packages and a lease on a Mercedes-Benz, to its salespeople in return for referral of business to Wells Fargo Home Mortgage Hawaii, LLC, a company in which Prudential had a financial interest. After the investigation, Prudential entered into a settlement agreement with HUD in 2005, consenting to a $48,000 penalty and promising not to violate RESPA in the future.
The second document at issue is an email, dated January 19, 2008 (the “2008 *771 Email”), alleging that Prudential was continuing to violate RESPA even after the settlement. The author of the email claimed to know about the continued violations because “an agent from Prudential ... expressed concern that his company was violating RESPA laws again.” The sender urged HUD to “interview [Prudential’s] agents [to] confirm there was a direct violation of RESPA again and be very strict on them.” Unlike the first complainant, this author specifically requested anonymity in his communication to HUD.
After receiving this email, HUD initiated a second investigation of Prudential. That investigation did not reveal any RES-PA violations, and it was closed in March 2009.
In June 2008, while the second investigation was in progress, Prudential filed a FOIA request with HUD, seeking “[d]ocuments sufficient to show the identity of all parties who provided information to HUD relating to the initiation” of the two investigations. HUD produced about four hundred pages of responsive documents in March 2009.
As part of that bundle, HUD released the 2003 Letter, redacting what appears to be a letterhead and a signature. HUD also produced a redacted copy of the 2008 Email, concealing the information contained in the email’s “from” line, the first half of the first sentence of the email, and the signature line. Also redacted was a sentence in the body of the email, leaving it to read: “Please take this action and I can be contacted at [REDACTED] but I would like to remain anonymous [REDACTED].” The first redaction in that sentence looks to be about the length of a phone number or email address, and the second spans approximately 10-12 average-length words.
In a letter accompanying the released documents, HUD relied on FOIA Exemption 6 to justify the redactions, stating that “[r]elease of this information would constitute an unwarranted invasion of personal privacy” and “[t]he interest of the general public in reviewing these portions of government documents does not outweigh the individuals’ right to privacy.”
Unsatisfied with this response, Prudential filed a complaint in the United States District Court for the District of Hawaii seeking unredacted copies of the two documents. In reply, HUD supported withholding the information by submitting a declaration from Ivy Jackson, the Director of the Office of RESPA and Interstate Land Sales at HUD. Jackson averred that “[i]t has been the policy of this office to never disclose the identity of a complainant whether or not the complainant affirmatively authorized the release.... These industry insiders are potentially vulnerable to retaliation, i.e. loss of employment, loss of business and legal action.” She further declared that “when speaking before industry groups I have stated that it is the policy of the office not to disclose the identity of any complainant.” Finally, according to Jackson, the RESPA investigations office has a “consistent policy and practice” of “protectfing] the identity of persons providing information about possible RE SPA violations, unless the person has specifically authorized release of his or her name.”
On cross-motions for summary judgment, the district court agreed with HUD that Exemption 6 justified redacting the information, and granted the agency’s motion. Prudential appealed.
II
1
We apply a two-step standard of review to summary judgment in FOIA
*772
cases. We “first determine!] under a
de novo
standard whether an adequate factual basis exists to support the district court’s decision!-].”
Lane v. Dep’t of Interior,
2
The FOIA is a disclosure statute, enacted to “permit access to official information long shielded unnecessarily from public view.”
Milner,
Of course, not all governmental information must be made publicly available; accordingly, the FOIA contains specific discretionary exemptions to its disclosure requirements.
See
5 U.S.C. § 552(b)(1)-(9);
Elec. Frontier Found. v. Office of the Dir. of Nat’l Intelligence,
Moreover, “the strong presumption in favor of disclosure places the burden on the agency to justify the withholding of any requested documents.”
U.S. Dep’t of State v. Ray,
Exemption 6, the exemption relied on by HUD, applies to “personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy.” 5 U.S.C. § 552(b)(6). Prudential does not dispute that the 2003 Letter and 2008 Email are “similar files” under Exemption 6. We express no view on that question and assume without deciding that the documents qualify. The only issue then is whether disclosing the redacted information “would constitute a clearly unwarranted invasion of personal privacy.” Id.
13] To answer that question, we must first confirm that some “personal privacy” interest is at stake.
See Church of Scientology of Cal. v. U.S. Dep’t of Army,
If some nontrivial personal privacy interest is at stake, the government can withhold the information only upon a showing that the invasion of privacy would be “clearly unwarranted.” 5 U.S.C. § 552(b)(6). That inquiry, ordinarily the meat and potatoes of the Exemption 6 analysis, requires us to “balance the privacy interest protected by the exemption[] against the public interest in government openness that would be served by disclosure.”
Lahr,
Finally, we must assess the
likelihood
that a privacy invasion will occur. We have not articulated a precise standard governing what the government must show in this respect, but a few precepts are apparent: Exemption 6 speaks of disclosure that
“would
constitute a clearly unwarranted invasion of personal privacy.” 5 U.S.C. § 552(b)(6) (emphasis added). At a minimum, and unsurprisingly given the emphatic “would” requirement in the statutory text, the threat to privacy interests must be “more palpable than [a] mere possibility].”
Dep’t of Air Force v. Rose,
The “substantial probability” standard is necessarily quite a high threshold. For one, it is a judicial gloss on the statute’s plain text, which requires a showing that making information public
“would
constitute” — rather than “might” or “could” constitute — an invasion of privacy, connoting something nearly certain to occur. Moreover, Exemption 6 has a law enforcement analogue, Exemption 7(C), which allows the government to withhold “records or information compiled for law enforcement purposes” if disclosure
“could reasonably be expected
to constitute an unwarranted invasion of personal privacy.” 5 U.S.C. § 552(b)(7)(C) (emphasis added). The marked difference in the statutory text of these exemptions indicates that our “substantial probability” gloss on Exemption 6 requires a significantly higher showing that an invasion will occur than the “could reasonably be expected” standard found in Exemption 7(C).
See Nat’l Archives & Records Admin. v. Favish,
With these principles in mind, we turn to the information in dispute here.
3
Releasing unredacted versions of the 2003 Letter and the 2008 Email could, but only possibly, invade personal privacy interests under Exemption 6. For instance, if the complainants work at Prudential, they could be stigmatized as disloyal employees by management and face retaliation in their employment. They might also be harassed or mistreated by their colleagues. After all, the kick-back scheme uncovered by HUD involved employee benefits — parties, expensive prizes, and exotic vacations — and some co-workers might resent losing such perks in the future. Likewise, the complainants could face retaliation even if they were, but are no longer, employees of Prudential. Disclosure of their whistleblower activities, for example, could affect their ability to obtain positive job references, diminishing their employment prospects. Also, even if the informants now work in non-managerial positions in the same industry as Prudential, they could face some stigma or harassment, as their employers or colleagues might view them as troublemakers or busy-bodies.
These examples of possible stigmatization, harassment, and retaliation resulting from cooperation with a governmental investigation would be cognizable personal privacy interests under the Exemption 6 precedents. For instance, in
United States Department of State v. Ray,
the plaintiff sought interviews conducted by the State Department with emigrants who had been involuntarily returned to Haiti by the United States.
The Supreme Court acknowledged that the emigrants had privacy interests in personal details revealed in the interviews, such as marital and employment status, if those details could be linked to particular individuals.
See id.
at 175-76,
We have also similarly recognized privacy interests under exemptions 6 and 7(C) even though intimate personal details were not at stake. In
Forest Service Employees,
for example, a watchdog organization requested the release of an agency report regarding an incident in which two firefighters died during a wildfire.
We affirmed the application of Exemption 6, holding that the employees had cognizable privacy interests in avoiding the “embarrassment and stigma” that might arise from association with the incident.
Id.
at 1026. We also acknowledged the employees possessed privacy interests in avoiding “harassment” by the plaintiff, who planned to contact them, as well as by the media, which was likely to follow suit given the significant public attention generated by the fire.
Id.; see also Lahr,
Therefore, if the complainants are or were employed by Prudential, or even if they worked in non-managerial positions in the same industry as Prudential, there might well be a substantial probability that disclosure would lead to an invasion of personal privacy — namely, revealing their whistle-blower status could result in stigmatization, harassment, or retaliation.
At the same time, the disclosure of names and other identifying information is not “inherently and always a significant threat to the privacy of the [named] individuals.”
Ray,
We fail to see, for example, how disclosing the names of managerial employees at an industry competitor of Prudential would infringe personal privacy interests in any nontrivial way. Such individuals would not face an apparent risk of harassment or stigmatization, and because such complaints would have been made primarily for business reasons, any plausible
personal
privacy interests would be nonexistent or seriously diminished.
2
See Elec. Fron
*776
tier Found.,
Likewise, complainants entirely unaffiliated with Prudential or the real estate industry might have
some
nontrivial privacy interest in not being associated with the investigation,
see Lahr,
Finally, we have long recognized that government officials, particularly those in senior positions, have diminished privacy interests.
See Lahr,
Nothing on the face of the redacted communications, or any explanatory evidence adduced by HUD, precludes these possibilities. The 2003 Letter reveals no clues whatever as to the complainant’s interest in the suspected violations, or as to his relationship to Prudential or the real estate industry. The author of the 2008 Email requested anonymity, suggesting he feared some adverse consequences could ensue from revealing his identity. At the same time, he claimed to have heard of the RESPA violations from an agent at Prudential, indicating, perhaps, that he was not employed there. That inference could well be incorrect, but we would be required to make it, as it is favorable to the nonmoving party on summary judgment.
See, e.g., Las Vegas Sands, LLC v. Nehme,
This “likelihood” problem — that is, whether there is a substantial probability of an invasion of privacy — does not often arise in cases approving withholding identifying information to protect privacy interests, because ordinarily evidence exists that some privacy concern
will
be infring
*777
ed. In many cases, courts are aware of characteristics about the protected individuals themselves — for instance, their status as potentially vulnerable emigrants,
see Ray,
In sum, HUD has yet to advance evidence sufficient to establish that an invasion of privacy is more than a speculative possibility. The district court, consequently, did not have an “adequate factual basis” to support its decision.
Lane,
We therefore remand to allow the district court to conduct such additional pro
*778
ceedings as it deems necessary.
5
See Rosenfeld v. U.S. Dep’t of Justice,
Ill
Before concluding, we pause to acknowledge HUD’s worry that releasing the names of persons who report suspected illegal activity will have a chilling effect on the ability of agencies to investigate legal violations. That concern is valid, but HUD has other tools to protect future informants in the event Exemption 6 proves inadequate.
Exemption 7(D), for example, specifically protects confidential sources.
6
“[A] source is ‘confidential,’ ” under this exemption, “if it ‘provided information under an express assurance of confidentiality or in circumstances from which such an assurance could be reasonably inferred.’ ”
Rosenfeld,
Likewise, as previously mentioned, Exemption 7(C) allows agencies to withhold “records or information compiled for law enforcement purposes, but only to the extent that the production of such law enforcement records or information ... could reasonably be expected to constitute an unwarranted invasion of personal privacy.” 5 U.S.C. § 552(b)(7)(C). That exemption requires less from the government to justify withholding information than Exemption 6, both in terms of the likelihood that an invasion will result and in determining whether such an invasion would be “unwarranted.” See supra note 1 and accompanying text. It too might be invoked in the future.
In light of the FOIA’s goal of “broad disclosure” and the Supreme Court’s repeated “insist[ance] that the exemptions be given a narrow compass,”
Milner,
We therefore vacate the grant of summary judgment to HUD and remand to allow the parties to develop an adequate factual basis for the district court to deter *779 mine whether the information at stake may be withheld pursuant to Exemption 6.
Each side shall bear its own costs on this appeal.
VACATED and REMANDED.
Notes
. The exemptions differ in another way as well: Exemption 7(C) does not require that a privacy invasion be "clearly” unwarranted. That exemption is therefore satisfied upon a lesser showing by the government of the strength of the privacy interests required to override the respective public interest at stake.
See Favish,
. Similarly, it is not unheard of for unscrupulous individuals to accuse a business of legal violations to depress the company's stock price or otherwise gain an advantage in securities trading.
See Medifast, Inc. v. Minkow,
No. 10-CV-382 JLS (BGS),
. The district court found that Prudential demonstrated a desire to contact and possibly sue the authors of the complaints.
Prudential,
. Prudential challenges the weight accorded by the district court to the public and privacy interests in its balancing analysis. We express no opinion on those arguments, other than to note that the government redacted a limited amount of identifying information, and the court is to assess “the marginal additional usefulness” of that withheld information.
Forest Serv. Emps.,
. For the reasons given, were HUD to establish only that the complainants are industry insiders, the agency must be prepared for the district court to draw the reasonable inference that that category encompasses managerial employees at a competitor organization with little or no personal privacy interests at stake.
. Exemption 7(D) protects from disclosure "records or information compiled for law enforcement purposes, but only to the extent” that disclosure "could reasonably be expected to disclose the
identity of a confidential source,
including a State, local, or foreign agency or authority or any private institution which furnished information on a confidential basis, and, in the case of a record or information compiled by criminal law enforcement authority in the course of a criminal investigation or by an agency conducting a lawful national security intelligence investigation, information furnished by a confidential source.” 5 U.S.C. § 552(b)(7)(D) (emphasis added);
see also Church of Scientology Int’l v. IRS,
