Declassification in the United States is governed by Executive Order 13526, signed December 29, 2009, which sets classification levels, declassification rules, and the boards that review refusals. The order's core bargain is an ending: under its automatic declassification provisions, most classified records lose protection after 25 years unless specifically exempted.
What does the order actually say?
Executive Order 13526 establishes three classification levels, tied to definable damage. As the text of the order states, information may be classified Top Secret when its unauthorized disclosure reasonably could be expected to cause exceptionally grave damage to national security, Secret for serious damage, and Confidential for damage. The order also presumes that damage for certain categories, such as foreign government information.
The declassification half of the order works through several mechanisms operating in parallel:
- Automatic declassification: most records 25 years or older are declassified systematically unless an exemption applies.
- Systematic review: agencies review aging record groups as they cross the threshold.
- Mandatory Declassification Review: any member of the public can request review of a specific document.
- Freedom of Information Act: a separate statutory track that often reaches the same records.
Exemptions exist for sources and methods, weapons design information, and other defined categories, and agencies can seek extensions for extraordinary cases. The burden sits on the classifying agency to justify continued protection, which is the order's central procedural commitment.
Who oversees the system?
Oversight is layered. The Information Security Oversight Office, housed at the National Archives, audits agency classification and declassification programs and reports their volume annually. Above it sits the Public Interest Declassification Board, an advisory body whose role and procedures are public: a Federal Register notice published June 8, 2020 announced the board's revised bylaws, formalizing how it advises the President on declassification policy, per the National Archives notice.
Appeals have a route as well. When an agency denies a Mandatory Declassification Review, the requester can appeal to the Interagency Security Classification Appeals Panel, known as ISCAP, whose decisions bind agencies. The panel's dockets, published by the National Archives, are one of the few public records of declassification disputes, including releases of historically significant documents.
Why does the process move slowly?
Volume is the honest answer. Decades of Cold War and counterterrorism records crossed or approach the 25-year line together, and review requires equities consultation: a single document can contain information owned by multiple agencies, each of which must concur in release. Equities review is where most delays accumulate, and agencies have publicly reported review backlogs in their ISOO statistics.
For the intelligence community, the stakes run both ways. Over-classification slows information sharing inside government, a finding repeated across oversight reviews, while release mistakes cannot be recalled. The 25-year default, the public review tracks, and the appeal panels exist to keep that tension resolved in favor of release unless an exemption is documented, which is the standard the order sets and the oversight bodies measure.
What is Mandatory Declassification Review?
Mandatory Declassification Review is the order's dedicated public channel, and it differs from FOIA in one decisive way: an agency conducting MDR must review the document for declassification in full, rather than searching for releasable excerpts. A requester identifies the record, the agency reviews every classification claim in it, and a denial can be appealed within the executive branch, first to the agency's appeal panel and then to ISCAP. The order's drafters built that ladder so that refusal requires an affirmative, reviewable justification at each rung.
The 25-year default changes the economics of the request. For records inside the automatic declassification window, agencies must already be releasing unless an exemption applies, so an MDR often accelerates a release that was scheduled anyway. For younger records, the request forces a fresh classification decision, which is why MDR outcomes are a fair proxy for how agencies apply the order's standards in practice.
What does the oversight machinery actually produce?
The public artifacts of this system are concrete. ISOO's annual statistics report classification and declassification volumes by agency, which is how the size of the problem stays visible. ISCAP's docket records show which agencies' refusals were overturned, a rare public scorecard of declassification disputes. And the Public Interest Declassification Board's published recommendations, operating under the bylaws announced in 2020, have addressed topics from classification reform to the backlog of older records awaiting review.
Those artifacts matter because declassification is one of the few intelligence-community activities that is fully auditable from outside. Budgets are obscured, operations are compartmented, but the rules for what the public may eventually read are written down, litigated in public dockets, and scored in published numbers. The system falls short of its own deadlines regularly; the point of the oversight layer is that the shortfalls are counted.
What are the limits of the current system?
The order's own structure identifies its pressure points. Equities review, in which every agency with a stake in a document must concur in release, multiplies review work across government and is the acknowledged source of backlog. The exemption categories are broad enough that agencies differ in how they apply them, which is precisely the inconsistency appeal panels exist to police. And the 25-year clock keeps delivering new cohorts of records, so the review workload is structural rather than episodic.
Reform proposals, including those from the Public Interest Declassification Board under its published bylaws, have concentrated on the same levers: better training for original classification authorities, since fewer and better-founded classifications shrink tomorrow's review burden; shared review infrastructure so agencies are not duplicating one another's work; and modernized records handling so that reviewable documents can actually be found. None of these is glamorous, and all of them are measurable in the published statistics.
