Michigan’s Freedom of Information Act requires a public body to respond to a written request within 5 business days, with at most one extension of up to 10 business days. MCL 15.243 lets public bodies exempt records of security measures, security and cybersecurity plans and assessments, and certain cybersecurity information, subject to stated limits.
\nUnder MCL 15.235, unless otherwise agreed in writing, a public body must respond to a FOIA request within 5 business days by granting it, denying it in writing, granting it in part, or issuing a notice extending the period by not more than 10 business days, and it may issue only one extension per request. A request sent by email is not received until 1 business day after transmission, and failing to respond can count as a final denial in specified circumstances.
\nMCL 15.233 requires employees who receive a request to promptly forward it to the FOIA coordinator, requires the coordinator to keep requests on file for at least 1 year, and requires a public body to protect public records from loss, unauthorized alteration, mutilation or destruction.
\nMCL 15.243 lets a public body exempt records of its security measures, including security plans, codes, passwords, keys and procedures, to the extent they relate to its ongoing security. It also covers records of measures to protect people, property or information systems, including emergency response plans, threat assessments and cybersecurity plans, assessments or vulnerabilities, unless disclosure would not impair security or the public interest in disclosure outweighs nondisclosure. Other exemptions cover personal information whose disclosure would be a clearly unwarranted invasion of privacy, and information that would disclose a person’s cybersecurity plans or practices.
\nUse this for Michigan public bodies and their vendors. Exemptions are permissive and fact-specific, other sections govern fees and separating exempt material, and other laws may restrict release; have counsel decide each request.
\nDSE recommends that Michigan public bodies set up a FOIA workflow for security system records and video that can meet the 5-business-day deadline and route exemption decisions to counsel. Tell vendors and staff to forward requests to the FOIA coordinator immediately, preserve requested video before routine overwrite, label security plans and network diagrams for exemption review, and log every request and response.
\nTest the workflow once a year with a mock request for a short video clip, and confirm the response, any extension notice and the preserved copy are produced on time.
\nMichigan Legislature — MCL 15.235, Freedom of Information Act (1976 PA 442). Michigan Legislature — MCL 15.233, Public records; request requirements. Michigan Legislature — MCL 15.243, Exemptions from disclosure. Reviewed October 18, 2026.
", "content_text": "Michigan’s Freedom of Information Act requires a public body to respond to a written request within 5 business days, with at most one extension of up to 10 business days. MCL 15.243 lets public bodies exempt records of security measures, security and cybersecurity plans and assessments, and certain cybersecurity information, subject to stated limits.\nSource facts\nUnder MCL 15.235, unless otherwise agreed in writing, a public body must respond to a FOIA request within 5 business days by granting it, denying it in writing, granting it in part, or issuing a notice extending the period by not more than 10 business days, and it may issue only one extension per request. A request sent by email is not received until 1 business day after transmission, and failing to respond can count as a final denial in specified circumstances.\nMCL 15.233 requires employees who receive a request to promptly forward it to the FOIA coordinator, requires the coordinator to keep requests on file for at least 1 year, and requires a public body to protect public records from loss, unauthorized alteration, mutilation or destruction.\nMCL 15.243 lets a public body exempt records of its security measures, including security plans, codes, passwords, keys and procedures, to the extent they relate to its ongoing security. It also covers records of measures to protect people, property or information systems, including emergency response plans, threat assessments and cybersecurity plans, assessments or vulnerabilities, unless disclosure would not impair security or the public interest in disclosure outweighs nondisclosure. Other exemptions cover personal information whose disclosure would be a clearly unwarranted invasion of privacy, and information that would disclose a person’s cybersecurity plans or practices.\nApplicability\nUse this for Michigan public bodies and their vendors. Exemptions are permissive and fact-specific, other sections govern fees and separating exempt material, and other laws may restrict release; have counsel decide each request.\nDSE recommendation\nDSE recommends that Michigan public bodies set up a FOIA workflow for security system records and video that can meet the 5-business-day deadline and route exemption decisions to counsel. Tell vendors and staff to forward requests to the FOIA coordinator immediately, preserve requested video before routine overwrite, label security plans and network diagrams for exemption review, and log every request and response.\nVerification\nTest the workflow once a year with a mock request for a short video clip, and confirm the response, any extension notice and the preserved copy are produced on time.\nOfficial references\nMichigan Legislature — MCL 15.235, Freedom of Information Act (1976 PA 442). Michigan Legislature — MCL 15.233, Public records; request requirements. Michigan Legislature — MCL 15.243, Exemptions from disclosure. Reviewed October 18, 2026.", "content_markdown": "Michigan’s Freedom of Information Act requires a public body to respond to a written request within 5 business days, with at most one extension of up to 10 business days. MCL 15.243 lets public bodies exempt records of security measures, security and cybersecurity plans and assessments, and certain cybersecurity information, subject to stated limits.\n\n## Source facts\n\nUnder [MCL 15.235](https://legislature.mi.gov/Laws/MCL?objectName=mcl-15-235), unless otherwise agreed in writing, a public body must respond to a FOIA request within 5 business days by granting it, denying it in writing, granting it in part, or issuing a notice extending the period by not more than 10 business days, and it may issue only one extension per request. A request sent by email is not received until 1 business day after transmission, and failing to respond can count as a final denial in specified circumstances.\n\n[MCL 15.233](https://legislature.mi.gov/Laws/MCL?objectName=mcl-15-233) requires employees who receive a request to promptly forward it to the FOIA coordinator, requires the coordinator to keep requests on file for at least 1 year, and requires a public body to protect public records from loss, unauthorized alteration, mutilation or destruction.\n\n[MCL 15.243](https://legislature.mi.gov/Laws/MCL?objectName=mcl-15-243) lets a public body exempt records of its security measures, including security plans, codes, passwords, keys and procedures, to the extent they relate to its ongoing security. It also covers records of measures to protect people, property or information systems, including emergency response plans, threat assessments and cybersecurity plans, assessments or vulnerabilities, unless disclosure would not impair security or the public interest in disclosure outweighs nondisclosure. Other exemptions cover personal information whose disclosure would be a clearly unwarranted invasion of privacy, and information that would disclose a person’s cybersecurity plans or practices.\n\n## Applicability\n\nUse this for Michigan public bodies and their vendors. Exemptions are permissive and fact-specific, other sections govern fees and separating exempt material, and other laws may restrict release; have counsel decide each request.\n\n## DSE recommendation\n\nDSE recommends that Michigan public bodies set up a FOIA workflow for security system records and video that can meet the 5-business-day deadline and route exemption decisions to counsel. Tell vendors and staff to forward requests to the FOIA coordinator immediately, preserve requested video before routine overwrite, label security plans and network diagrams for exemption review, and log every request and response.\n\n## Verification\n\nTest the workflow once a year with a mock request for a short video clip, and confirm the response, any extension notice and the preserved copy are produced on time.\n\n## Official references\n\n[Michigan Legislature — MCL 15.235, Freedom of Information Act (1976 PA 442)](https://legislature.mi.gov/Laws/MCL?objectName=mcl-15-235). [Michigan Legislature — MCL 15.233, Public records; request requirements](https://legislature.mi.gov/Laws/MCL?objectName=mcl-15-233). [Michigan Legislature — MCL 15.243, Exemptions from disclosure](https://legislature.mi.gov/Laws/MCL?objectName=mcl-15-243). Reviewed October 18, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/michigan-foia-response-deadline-security-measures-cybersecurity-exemptions/", "url": "https://update.dsesecurity.com/updates/michigan-foia-response-deadline-security-measures-cybersecurity-exemptions/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-18" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/michigan-foia-response-deadline-security-measures-cybersecurity-exemptions/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Michigan FOIA: respond within 5 business days, and know the exemptions for security plans and cybersecurity records", "item": "https://update.dsesecurity.com/updates/michigan-foia-response-deadline-security-measures-cybersecurity-exemptions/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/michigan-foia-response-deadline-security-measures-cybersecurity-exemptions/#article", "identifier": "https://update.dsesecurity.com/updates/michigan-foia-response-deadline-security-measures-cybersecurity-exemptions/", "url": "https://update.dsesecurity.com/updates/michigan-foia-response-deadline-security-measures-cybersecurity-exemptions/", "headline": "Michigan FOIA: respond within 5 business days, and know the exemptions for security plans and cybersecurity records", "description": "Michigan’s Freedom of Information Act requires a public body to respond to a written request within 5 business days, with at most one extension of up…", "abstract": "Michigan’s Freedom of Information Act requires a public body to respond to a written request within 5 business days, with at most one extension of up to 10 business days. MCL 15.243 lets public bodies exempt records of security measures, security and cybersecurity plans and assessments, and certain cybersecurity information, subject to stated limits.", "articleBody": "Michigan’s Freedom of Information Act requires a public body to respond to a written request within 5 business days, with at most one extension of up to 10 business days. MCL 15.243 lets public bodies exempt records of security measures, security and cybersecurity plans and assessments, and certain cybersecurity information, subject to stated limits.\nSource facts\nUnder MCL 15.235, unless otherwise agreed in writing, a public body must respond to a FOIA request within 5 business days by granting it, denying it in writing, granting it in part, or issuing a notice extending the period by not more than 10 business days, and it may issue only one extension per request. A request sent by email is not received until 1 business day after transmission, and failing to respond can count as a final denial in specified circumstances.\nMCL 15.233 requires employees who receive a request to promptly forward it to the FOIA coordinator, requires the coordinator to keep requests on file for at least 1 year, and requires a public body to protect public records from loss, unauthorized alteration, mutilation or destruction.\nMCL 15.243 lets a public body exempt records of its security measures, including security plans, codes, passwords, keys and procedures, to the extent they relate to its ongoing security. It also covers records of measures to protect people, property or information systems, including emergency response plans, threat assessments and cybersecurity plans, assessments or vulnerabilities, unless disclosure would not impair security or the public interest in disclosure outweighs nondisclosure. Other exemptions cover personal information whose disclosure would be a clearly unwarranted invasion of privacy, and information that would disclose a person’s cybersecurity plans or practices.\nApplicability\nUse this for Michigan public bodies and their vendors. Exemptions are permissive and fact-specific, other sections govern fees and separating exempt material, and other laws may restrict release; have counsel decide each request.\nDSE recommendation\nDSE recommends that Michigan public bodies set up a FOIA workflow for security system records and video that can meet the 5-business-day deadline and route exemption decisions to counsel. Tell vendors and staff to forward requests to the FOIA coordinator immediately, preserve requested video before routine overwrite, label security plans and network diagrams for exemption review, and log every request and response.\nVerification\nTest the workflow once a year with a mock request for a short video clip, and confirm the response, any extension notice and the preserved copy are produced on time.\nOfficial references\nMichigan Legislature — MCL 15.235, Freedom of Information Act (1976 PA 442). Michigan Legislature — MCL 15.233, Public records; request requirements. Michigan Legislature — MCL 15.243, Exemptions from disclosure. Reviewed October 18, 2026.", "datePublished": "2026-10-18T21:01:27+00:00", "dateModified": "2026-10-18T22:22:08+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/michigan-foia-response-deadline-security-measures-cybersecurity-exemptions/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/michigan-foia-response-deadline-security-measures-cybersecurity-exemptions/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Michigan FOIA: respond within 5 business days, and know the exemptions for security plans and cybersecurity records" }, "articleSection": [ "Cybersecurity", "Video Surveillance" ], "keywords": [ "Cybersecurity", "Video Surveillance", "Briefing", "Advisory priority" ], "genre": "Briefing", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "Video Surveillance", "url": "https://update.dsesecurity.com/topic/video-surveillance/" } ], "wordCount": 423, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Michigan Legislature — MCL 15.235, Freedom of Information Act (1976 PA 442)", "url": "https://legislature.mi.gov/Laws/MCL?objectName=mcl-15-235" } } ] } }