9. Computer software

We know of no request for software under Alabama’s Public Records Law.

The Public Records Act expressly defines the term “public records” as excluding “proprietary software programs.” AS 40.25.220(3). While by negative inference it would appear that nonproprietary software may be available as a “public record,” it should be noted that the Public Records Act expressly includes within its definition of “electronic products and services,” for which different rules apply with respect to accessibility and fees, “providing software developed by a public agency or developed by a private contractor for a public agency.” AS 40.25.220(1)(F).

The Public Records Act defines the term “public records” to mean “books, papers, files, accounts, writings, including drafts and memorializations of conversations, and other items, regardless of format or physical characteristics. …” AS 40.25.220(3).  There are no reported cases at this time dealing with metadata specifically.  Whether metadata are public records is likely to depend primarily on whether they relate to public business and more specifically, whether they are “developed or received by a public agency, or by a private contractor for a public agency, and that are preserved for their informational value or as evidence of the organization or operation of the public agency.” AS 40.25.220(3). There is no apparent reason why this information should not be deemed public record, subject to otherwise applicable exceptions.

No Arizona statute or case addresses this issue, but a court would likely follow the Court of Appeals reasoning in Lunney v. State of Arizona, regarding a public employee’s use of a private cellphone.

No. The definition of public records does not include “software acquired by purchase, lease, or license.” Ark. Code Ann. § 25-19-103(5)(B).
There is no statutory or case law addressing this issue.

“Computer software developed by a state or local agency is not itself a public record under this chapter. The agency may sell, lease, or license the software for commercial or noncommercial use.”  Cal. Gov’t Code § 7922.585(b).  “‘Computer software’ includes computer mapping systems, computer programs, and computer graphics systems.’” Id. § 7922.585(a). “Nothing in this section is intended to affect the public record status of information merely because it is stored in a computer.” Id. § 7922.585(d).

In 2013, the California Supreme Court was called upon to decide “whether the statutory exemption for ‘[c]omputer software’ (§ 7922.585(b))—a term that ‘includes computer mapping systems’ (§ 7922.585(a))—encompasses mapping data in a GIS file format . . . or only GIS mapping software . . . .” See Sierra Club v. Superior Court, 57 Cal. 4th 157, 176, 158 Cal. Rptr. 639, 302 P.3d 1026 (2013). In rejecting the argument that computer mapping systems includes the databases underlying the mapping software since it enables a database to function as part of a computer mapping system, the court relied on the ordinary meaning of the statute’s text and the interpretative mandates of the California Sunshine Amendment. Id. at 171, 175. To the extent the term “computer mapping systems” was ambiguous, the court said “the constitutional cannon requires us to interpret it in a way that maximizes the public’s access to information . . . .” Id. at 175. Applying these principles, the court held that a parcel database in GIS file format was not within Section [7922.585(b)’s] exclusion for computer software from the definition of public records under the CPRA. Id. at 176.

Software is not a public record. Public records includes all writings, but writings is defined as "all books, papers, maps, photographs, cards, tapes, recordings, or other documentary materials, regardless of physical form or characteristics. 'Writings' includes digitally stored data, including without limitation electronic mail messages, but does not include computer software." Colo. Rev. Stat. § 24-72-202(7).  Metadata may be public since it likely constitutes "digitally stored data." Colo. Rev. Stat. § 24-72-202(7).

See Conn. Gen. Stat. §1-211.

To the extent that software contains or is proprietary or trade secret information, such software is exempt from disclosure. 29 Del. C. § 10002(o)(2); Del. Op. Att’y Gen., No. 06-ib17 (Aug. 21, 2006).

Not specifically addressed.

An agency’s software is a public record.  See Fla. Stat. § 119.011(12).  However, data processing software obtained by an agency under a licensing agreement which prohibits its disclosure and which software is a trade secret, as defined in Fla. Stat. § 812.081(c), and agency-produced data processing software which is sensitive are exempt.  See Fla. Stat. §§ 119.071(f).

File metadata has not been addressed.

Computer programs and computer software are exempted from disclosure under the Act. O.C.G.A. § 50-18-72(a)(44).

There is no statutory or case law addressing this issue.

Idaho Code § 74-107(15) exempts computer programs developed or purchased by or for any public agency for its own use from disclosure under the Act.  The definition of a “computer program” does not include: “(a) The original data including, but not limited to, numbers, text, voice, graphics and images; (b) Analysis, compilation and other manipulated forms of the original data produced by use of the program; or (c) The mathematical or statistical formulas that would be used if the manipulated forms of the original data were to be produced manually.” Id.

Computer software is open, unless (1) it constitutes proprietary or trade secret information under 5 ILCS 140/7(1)(g); (2) it is copyright protected and, thus, exempt under 5 ILCS 140/7(1)(a); or (3) it is exempt as “[a]dministrative or technical information associated with automated data processing operations . . . that, if disclosed, would jeopardize the security of the system or its data or the security of materials exempt under this Section.” 5 ILCS 140/7(1)(o); Garlick v. Naperville Twp., 2017 IL App (2d) 170025, 84 N.E.3d 607. The FOIA and the case law interpreting the Act do not address metadata. As such, it should be open. See 5 ILCS 140/1.2.

“Computer programs, computer codes, computer filing systems, and other software that are owned by the public agency” may be exempted from disclosure at the agency’s discretion.  Ind. Code § 5-14-3-4(b)(11).

 “A public agency that maintains or contracts for the maintenance of public records in an electronic data storage system shall make reasonable efforts to provide to a person making a request a copy of all disclosable data contained in the records on paper, disk, tape, drum, or any other method of electronic retrieval if the medium requested is compatible with the agency’s data storage system.”  Ind. Code § 5-14-3-3(d).  No reported case law interprets this provision of the Act or addresses metadata.

"Data processing software" means an ordered set of instructions or statements that, when executed by a computer, causes the computer to process data, and includes any program or set of programs, procedures, or routines used to employ and control capabilities of computer hardware. As used in this paragraph "data processing software" includes but is not limited to an operating system, compiler, assembler, utility, library resource, maintenance routine, application, or computer networking program.  Iowa Code § 22.3A(1)(e).

“A government body may provide, restrict, or prohibit access to data processing software developed by the government body, regardless of whether the data processing software is separated or combined with a public record.” Iowa Code § 22.3A(2). “A public record shall not be withheld from the public because it is combined with data processing software. A government body shall not acquire any electronic data processing system for the storage, manipulation, or retrieval of public records that would impair the government body's ability to permit the examination of a public record and the copying of a public record in either written or electronic form.”  Id.

Data processing software will not be publicly available information where it is a trade secret, which is exempt as confidential under Iowa Code section 22.7. See Iowa Film Prod. Servs., 818 N.W.2d at 221-22; Simington v. Banwart, No. 09-1561, 2010 WL 2089348, at *4 (Iowa Ct. App. May 26, 2010) (citing Brown v. Iowa Legislative Council, 490 N.W.2d 551, 553-54 (Iowa 1992)).

A public agency is not required to disclose software programs for electronic data processing and documentation thereof, but each public agency shall maintain a register that is open to the public which describes: (1) the information which the agency maintains on computer facilities, and (2) the form in which this information can be made available using the existing computer programs. K.S.A. 45-221(a)(16).

A public agency may establish a proprietary computerized system that allows access to public records on a paid subscription basis, but this does not alter the nature of the public record or applicability of KORA; public records accessed through such a system must be made available upon request at a fee not exceeding the actual cost of production.  Kan. Att’y Gen. Op. 95-64.  Also, a public agency may enter into a contract with a private company to provide computer access to county records, but such contracts do not relieve a county of KORA obligations.  Kan. Att’y Gen. Op. 2009-14.

Computer software is exempted from disclosure if it constitutes “material which is prohibited from disclosure or copying by a license agreement between a public agency and an outside entity which supplied the material to the agency.” Ky. Rev. Stat. 61.870(3)(b).

No specific provision, but under the Act, computer software and/or file metadata should be treated as a public record and should be produced to a requester absent an applicable exemption, if it otherwise falls within the definition of “public record.”  However, “any documentary material of a security feature of a public body's electronic data processing system, information technology system, telecommunications network, or electronic security system, including hardware or software security, password, or security procedure, process, configuration, software, and code is not a ‘public record.’”  La. Rev. Stat. Ann. § 44:1(A)(2)(b).

Computer programs, technical data, logic diagrams and source code related to data processing or telecommunications that qualify as trade secrets are not public records.  5 M.R.S.A. § 1976(1).  Otherwise, “any document created or stored on a State Government computer must be made available in accordance with” the public records law.  5 M.R.S.A. § 1976.

A custodian is not permitted to release an electronic record in a format that would “jeopardize or compromise the security or integrity of the original record or of any proprietary software.”  § 4-205(c)(4).

No. “A custodian is not obligated to provide copies of a computer program,” because such a program is merely “a tool used in the processing of data rather than a ‘record,’ and therefore is not subject to mandatory disclosure.” SPR Bulletin 3-96, “Application of the Public Records Law to Electronic Records Access,” June 6, 1996.

State government offices are required to preserve the metadata associated with any email message, even if the email is printed out, “to ensure the capture and preservation of a complete record.” SPR Bulletin 1-99 (2003), at ¶ 7.

Computer software is exempt from the definition of public record under Mich. Comp. Laws 15.232(i). The statute and case law do not specifically address metadata.

Any agency can enforce a copyright for computer software created by the agency. If the agency acquires a patent to such software, the data is treated as non-public trade secret information pursuant to Minn. Stat. § 13.37. Minn. Stat. § 13.03, subd. 5.

Software is not public if the license prohibits disclosure and it is a trade secret, or if it is “sensitive” i.e., controls access to exempt information, or security reasons, or information whose disclosure would “require a significant intrusion into the business of a public body.” §25-61-9(6); §25-61-10(1); Att’y Gen. No. 04-193; June 4, 2004 to Thompson.

Software codes for electronic data processing and documentation thereof may be closed. Mo.Rev.Stat. § 610.021(10).

Software and meta-data residing on government computers are subject to public inspection.

Computer software is not addressed in the public records statutes. The Attorney General has opined that computer software is generally considered to be public record, subject to the exceptions contained in the public records statutes. Op. Atty. Gen. No. 96074 (Nov. 13, 1996). The Attorney General Opinion advises agencies that there may be “significant legal restrictions imposed by any copyright or trademark pertaining to the computer codes. . . .” Id. No statute, case law or Attorney General opinion addresses whether computer file metadata is a public record.

Metadata is not addressed in the public records statutes.

Computer software developed by the government is not a public record, but the computer software may generate public records. The software can generate public records which are deemed to exist so long as computer is already programmed to generate these records.

As “governmental records.” See RSA 91-A:1-a,III-IV.

N.J.S.A. 47:1A-1.1 provides in pertinent part:

A government record shall not include the following information which is deemed to be confidential for the purposes of P.L. 1963, c. 73 (C.47:1A-1 et seq.) as amended and supplemented:

*           *           *

trade secrets and proprietary commercial or financial information obtained from any source.  For the purposes of this paragraph, trade secrets shall include data processing software obtained by a public body under a licensing agreement which prohibits its disclosure.

(Emphasis added.)

The Public Records Act states that information contained in information systems or computer databases shall be a public record.  NMSA 1978 §§ 14-3-15.1 and 14-3-18(C).  There is no statutory or case law indicating specifically whether software is included.

In Matter of Irwin v. Onondaga Cty. Resource Recovery Agency, 72 A.D.3d 314, 895 N.Y.S.2d 262 (4th Dep’t 2010), the court engaged in analysis of a request for the metadata related to pictures contained on a web site.  The court described three possible types of metadata: “substantive metadata,” which is created by the software used to create a document and reflects editing changes or comments; “system metadata,” which reflects automatically generated information about a document such as its author and time of creation and modification; and “embedded metadata,” which is inputted into a file by a document’s creator or user, but cannot be seen in the document’s display.  Examples of embedded metadata include the formulas used in a spread sheet, or linked files.  The court ruled that “system metadata” constitutes a record under FOIL pursuant to Data Tree, LLC v. Romaine, because it is the electronic equivalent of notes on a file folder indicating the date of its creation.  However, the court specifically declined to rule whether substantive or embedded metadata were “records” subject to disclosure under FOIL.

Another ruling related to metadata is Hearst Corp. v. State, Office of State Comptroller, 24 Misc.3d 611, 882 N.Y.S.2d 862 (N.Y. Sup. 2009), in which the Supreme Court ruled that while metadata contained in databases maintained by the Office of the State Comptroller could constitute a trade secret subject to the exemption contained in § 87(2)(d), it could find no commercial harm in releasing the requested information.

The Public Records Law does not address this question, but an opinion of the Attorney General found that “the explicit language of G.S. §132-6.1 distinguishes software used to generate records from records it generates. Thus, we are of the opinion that in light of current law, the General Assembly did not intend to mandate disclosure of State-owned computer software pursuant to G.S. §132-1 et seq.” 1998 WL 459785 (N.C.A.G. May 28, 1998).

A computer software program and components of a computer software program that are subject to a copyright or a patent and any formula, pattern, compilation, program, device, method, technique, or process supplied to a public entity that is the subject of efforts by the supplying person to maintain its secrecy and that may derive independent economic value, actual or potential, from not being generally known to, and not being readily ascertainable by proper means by, other persons that might obtain economic value from its disclosure or use is confidential, so long as the information is of a privileged nature and has not been previously publicly disclosed. N.D.C.C. § 44-04-18.4(1), (2)(c)(7).

Any computer software program or component of a computer software program contracted, developed, or acquired by a public entity or state agency, institution, department, or board and for which the public entity or state agency, institution, department, or board acquires a license, copyright, or patent is exempt. N.D.C.C. § 44-04-18.5.

Proprietary software is not a public record, even if needed to access public records.  State ex rel. Recodat Co. v. Buchanan, 46 Ohio St. 3d 163, 546 N.E.2d 203 (1989).

The owner of a real estate appraisal business used to obtain from a county engineer digital copies  electronically-stored aerial photographs and tax maps to use in his business. When the county changed software, the engineer's office could no longer create data files for the public in readable form because the data was only readable with copyrighted software licensed to the county.

The county demanded $2,000 to retrieve the requested electronic maps and photographs and then separate the data from the copyright-protected software. The business owner sued, but didn't claim that the software was public record, and did not he seek a copy of the software.

The business owner argued that the raw data was public, and that the county should bear the $2,000 cost to separate the data from the software. The Ohio Supreme Court ruled that the business owner had to pay the $2,000 cost if he wanted the data separated from the software. But if he wanted the data together with the copyright-protected software, he could not get it because of the federal Copyright Act, which protected the copyright owner from unauthorized copying of the software. The county relied on an exception in the Public Records Act for records "the release of which is prohibited by state or federal law." State ex rel. Gambill v. Opperman, 135 Ohio St.3d 298, 986 N.E.2d 931, 2013-Ohio-761.

Computer software is not a record under the Open Records Act. 51 O.S. § 24A.3(1)(a).

The Act does not impose any additional recordkeeping requirements on public bodies or public officials, including making new records. 51 O.S. § 24A.18.

Whether metadata would be public has not been specifically addressed in the state.

ORS 192.345(15) (formerly ORS 192.501) exempts “[c]omputer programs developed or purchased by or for any public body for its own use” from disclosure “unless the public interest requires disclosure in the particular instance.” The definition of “computer program” does not include data or analyses produced by software or mathematical and statistical formulas. ORS 192.345(15)(a)-(c). The statute does not specifically address software that is “licensed” as opposed to “purchased.” The Attorney General has concluded that ORS 192.324 (formerly ORS 192.440) requires public bodies “to retrieve and make available nonexempt computer or electronically stored data and information, when requested, through the computer software or programs in use by the public body,” but that under ORS 192.345(15) (formerly ORS 192.501) the public body is not required to disclose the underlying software or program. Attorney General's Manual § 1.C.1. ORS 268.357, concerning software developed using public funds by metropolitan service districts, provides that “[n]otwithstanding any other provision of law, district software product programming source codes, object codes and geographic databases or systems are confidential and exempt from public disclosure under ORS 192.355 [formerly ORS 192.502].”

There is no case law specifically addressing metadata in the context of public records. The statute, however, provides:

If the public record is maintained in a machine readable or electronic form, the custodian shall provide a copy of the public record in the form requested, if available. If the public record is not available in the form requested, the custodian shall make the public record available in the form in which the custodian maintains the public record.

ORS 192.324(3) (formerly ORS 192.440) (emphasis added). Because the form in which many electronic records are stored includes metadata, it appears that this provision makes files’ metadata public, though no case has addressed the issue.

Under 65 Pa. Stat. Ann. § 67.708(b)(4), software is presumptively accessible unless it “would be reasonably likely to jeopardize [the agency’s] computer security.” Software and metadata are public so long as they “would [not] be reasonably likely to jeopardize [the agency’s] computer security.”

There is no statutory or case law addressing this issue.

The definition of public record includes documentation regardless of physical form or characteristics; therefore, software could be a public record.  S.C. Code Ann. §30-4-20(c); Seago v. Horry County, 663 S.E.2d 38 (S.C. 2008).

Data meeting the definition of public record will be considered public records under the Act, but a copyright may be claimed to restrict commercial use. Seago v. Horry County, 663 S.E.2d 38 (S.C. 2008).

Form and format do not alter a record’s essence. SDCL §1-27-1.1 and SDCL  §1-27-4.

Computer programs sold, licensed or donated to the state are closed. T.C.A. § 10-7-504(a)(18)

Section 552.139 makes security assessments of a governmental body’s  data processing operations, computers, computer programs, networks, systems, or system interfaces confidential.

Texas Education Code § 51.914 specifically excepts computer programs developed (in whole or in part) at a state institution of higher education from disclosure under the Act.

The Attorney General addressed a request for copies of computer programs used by Southwest Texas State University to maintain records in Tex. Att'y Gen. ORD-581 (1990). While the Attorney General found that the term "information" as used in the Act "is certainly comprehensive," he determined that "where information has no other significance than its use as a tool for the maintenance, manipulation, or protection of public property, we find that it is not the kind of information made public" by the Act. Id. at 4. Accordingly, the Attorney General advised that the computer programs need not be released. Id. at 5; see also Tex. Att’y Gen. Op. OR2011-06282.  In addition, where release of copies of computer programs owned by third parties and protected by copyright would violate federal law, disclosure is not required. Tex. Att'y Gen. ORD-505 (1988).

Proprietary software and computer programs are not subject to GRAMA. Utah Code § 63G-2-103(22)(b)(v), (x). While Utah courts have not had the opportunity to decide the issue, software and file metadata arguably are exempt from disclosure as well. See Maese v. Davis Cty., 273 P.3d 949, 952 (Utah 2012) (declining to determine whether the database file, its metadata, or other hidden variables constitute public records under GRAMA).

Computer software is not addressed in the Public Records Act, nor has it been addressed by Vermont courts.  The Public Records Act, does, however, exempt:

“All State-controlled database structures and application code, including the vermontvacation.com website and Travel Planner application, which are known only to certain State departments engaging in marketing activities and which give the State an opportunity to obtain a marketing advantage over any other state, regional, or local governmental or nonprofit quasi-governmental entity, or private sector entity, unless any such State department engaging in marketing activities determines that the license or other voluntary disclosure of such materials is in the State’s best interests.”

1 V.S.A. § 317 (c)(30).

Computer software falls within the definition of “public record.” Vendor proprietary information software acquired from a vendor for data processing use in the possession of a public body is subject to exclusion from disclosure. Va. Code Ann. § 2.2-3705.1.6. Computer software developed by or for a state agency, public institution of higher education or political subdivision is subject to exclusion. Va. Code Ann. § 2.2-3705.1.7.

Metadata has no special treatment by statute.

There is no statute or case law specifically addressing this issue.

There have been no court decisions or agency guidance indicating how software is to be treated for purposes of FOIA analysis. Nor have there been any court decisions or agency guidance indicating how file metadata is to be treated for purposes of FOIA analysis.

The statutory definition of “record” includes “tapes (including computer tapes) computer printouts and optical disks,” but excludes “materials to which access is limited by copyright . . . .” Wis. Stat. § 19.32(2). Wisconsin courts have not expressly addressed whether the Open Records Law applies to software.

An agency may decline access to records if it would compromise the security or integrity of "any propriety software."  Wyo. Stat. 16-4-202(d)(iv).