The bill adds the Firearm Trace System database and related licensee records to the exemptions in the Freedom of Information Act, blocking public FOIA access to ATF trace files and to records that licensees must keep or report under 18 U.S.C. 923(g). It also creates civil and administrative consequences for unauthorized disclosures: the Attorney General may impose per-disclosure fines on State, local, tribal, or foreign entities, and may suspend disclosure of protected information to repeat offenders.
Separately, the bill gives entities licensed under 18 U.S.C. 923 (federally licensed firearms dealers and manufacturers) a private right of action against any Federal agency or nonfederal actor that unlawfully discloses protected information. The statutory remedies include treble damages or a $25,000-per-item floor, punitive damages, and attorney’s fees, and the bill waives sovereign immunity for suits under this statute.
The measure defines ‘‘protected information’’ and ties the FOIA change to the existing appropriations proviso that already bars ATF from broadly sharing trace data.
At a Glance
What It Does
The bill amends 5 U.S.C. 552(b) to exempt ATF Firearm Trace System contents and certain 18 U.S.C. 923(g) records from FOIA. It authorizes the Attorney General to fine nonfederal entities for unauthorized disclosures and to suspend ATF disclosures to repeat violators, and it creates a private cause of action for licensed firearms entities harmed by unlawful disclosures.
Who It Affects
Federally licensed firearms businesses (18 U.S.C. 923 licensees), the ATF/National Trace Center, State/local/tribal law enforcement and government entities that receive trace data, and federal agencies that handle the database are directly affected. Journalists, researchers, and public-safety partners who have used trace data will see access curtailed by the FOIA change.
Why It Matters
The bill converts a longstanding appropriations-based restriction on trace disclosures into a statutory FOIA exemption and a standalone enforcement regime, shifting enforcement from appropriations language and agency practice to fines and private litigation. That changes the legal remedies available to licensees and raises the stakes for any party that handles or releases trace information.
More articles like this one.
A weekly email with all the latest developments on this topic.
What This Bill Actually Does
The bill makes two parallel legal changes to protect information contained in the ATF’s Firearm Trace System and the records that licensed firearms businesses must keep or report. First, it inserts a new exemption into the FOIA statute exempting the contents of the trace database and related 923(g) records from public disclosure.
That means the documents and data currently protected by the appropriations proviso would be protected by a permanent statutory FOIA exemption rather than solely by appropriations riders or agency policy.
Second, the bill builds an enforcement framework aimed at nonfederal and federal actors who disclose that protected information. For State, local, tribal, or foreign entities the Attorney General may impose monetary fines for unlawful disclosures, with set amounts for first and repeat violations and a rule that assesses fines per disclosed item.
The Attorney General can also withhold ATF disclosures to an entity that has committed a repeat violation for one year. Parallel to those administrative penalties, the measure creates a private right of action allowing any holder of an 18 U.S.C. 923 license who is harmed by an unlawful disclosure to sue for statutory remedies.That private cause of action removes sovereign immunity as a defense, making federal agencies potentially liable in court.
A prevailing licensee may recover either treble damages for its losses or a statutory floor of $25,000 per disclosed item, plus punitive damages and attorneys’ fees. The bill preserves other remedies that might exist under law and includes standard severability language.
Finally, it defines terms—most importantly ‘‘protected information’’ (the trace system contents and certain 923(g) records) and the ‘‘covered disclosure statute’’ (the appropriations proviso that has historically limited ATF disclosures)—to tie the new FOIA exemption and liability rules back to existing statutory and appropriations language.
The Five Things You Need to Know
The bill amends FOIA (5 U.S.C. 552(b)) by adding an exemption for the ATF’s Firearm Trace System and records required or reported under 18 U.S.C. 923(g).
The Attorney General may fine a State, local, tribal, or foreign entity $10,000 for a first (or lone) violation and $25,000 for any other violation, and must calculate fines per disclosed item.
If an entity is fined under the $25,000 repeat-violation provision, the Attorney General may stop disclosing protected information to that entity for one year.
A licensed firearms entity (an 18 U.S.C. 923 licensee) can sue any Federal agency or local/tribal/foreign entity that unlawfully discloses protected information; sovereign immunity is waived for such suits.
Remedies for a prevailing licensee include treble damages or $25,000 per disclosed item (whichever is greater), punitive damages as the court allows, and reasonable attorneys’ fees and costs.
Section-by-Section Breakdown
Every bill we cover gets an analysis of its key sections.
Short title
Declares the Act’s short title as the ‘‘Law Enforcement Protection and Privacy Act of 2025.’” This is the formal caption; it does not create substantive rights but frames subsequent provisions as aimed at protecting law enforcement-related data and privacy.
FOIA exemption for trace data and 923(g) records
Amends 5 U.S.C. 552(b) to add a new exemption for the contents of the Firearm Trace System maintained by ATF’s National Trace Center and for records licensees must keep or report under 18 U.S.C. 923(g). Practically, this elevates the existing appropriations-based restriction into the FOIA statute itself, making FOIA requests for the covered materials subject to this categorical exemption. That change alters the litigation posture for requesters: courts will evaluate claims under an express FOIA exemption rather than deference to appropriations riders or agency policy.
Civil fines and access suspension for nonfederal disclosures
Authorizes the Attorney General to impose monetary fines on State, local, tribal, or foreign entities that disclose protected information in violation of the covered disclosure statute or other applicable federal law. The bill sets a $10,000 amount for a first violation (or a violation occurring more than three years after the last) and $25,000 for subsequent violations, with fines imposed per disclosed item. It also gives the Attorney General discretionary authority to withhold protected information from any entity fined under the repeat-violation provision for one year, and authorizes the Department of Justice to sue to collect fines.
Private right of action and waiver of sovereign immunity
Grants entities licensed under 18 U.S.C. 923 a private cause of action against any Federal agency or State/local/tribal/foreign entity that unlawfully discloses protected information. The provision expressly eliminates sovereign immunity as a defense to these suits and enumerates remedies: treble damages (including business and reputational losses) or a $25,000-per-item statutory minimum, punitive damages as permitted by the court, and attorney’s fees and costs. This creates a direct litigation pathway for licensees harmed by disclosures and exposes federal agencies to money judgments in a way not commonly available under other statutory frameworks.
Preservation of other remedies and severability
Clarifies that the Act does not preclude other legal remedies and includes severability language so that an invalidation of any part will not necessarily void the remainder. That preserves overlapping enforcement mechanisms—administrative, civil, and criminal—that might apply to trace-data disclosures.
Definitions tying the statute to existing appropriations and scope
Defines key terms: the ‘‘covered disclosure statute’’ as the 2012 appropriations proviso that limits ATF trace disclosures (or successor law); ‘‘Federal agency’’ by cross-reference to 28 U.S.C. 2671; ‘‘local entity’’ as a political subdivision that is not an arm of the State; and ‘‘protected information’’ as the trace database contents and records required or reported under 18 U.S.C. 923(g). By anchoring the bill to the long-standing appropriations language, the drafters limit the scope to the same categories historically shielded from public release.
This bill is one of many.
Codify tracks hundreds of bills on Privacy across all five countries.
Explore Privacy in Codify Search →Who Benefits and Who Bears the Cost
Every bill creates winners and losers. Here's who stands to gain and who bears the cost.
Who Benefits
- Federally licensed firearms dealers and manufacturers (18 U.S.C. 923 licensees): gain a statutory private right to sue for unauthorized disclosures and a significant damages floor or treble damages, giving them a direct remedy for reputational and business harms.
- ATF and federal law enforcement: receive a statutory FOIA exemption that reduces litigation pressure and formalizes confidentiality protections for the National Trace Center database.
- Individuals and law enforcement officers whose identifying information appears in trace records: indirectly benefit from stronger statutory protection against public dissemination of sensitive trace data.
Who Bears the Cost
- State, local, and tribal governments and their law enforcement agencies: face new exposure to per-item fines and a possible one-year suspension of access to ATF trace information after repeat violations, which could deter some intergovernmental data sharing.
- Federal agencies: become subject to private suits without sovereign-immunity defenses and may face treble or statutory per-item damages, increasing litigation risk and potential financial liability.
- Journalists, researchers, and public-interest organizations: lose a route to request ATF trace records via FOIA and may see reduced access to trace-based data used for public-safety research and oversight.
Key Issues
The Core Tension
The central dilemma is balancing stronger confidentiality for firearm-trace records—which protects investigative integrity, individual privacy, and the business interests of licensees—against reduced public transparency and significant new liability that may chill lawful information sharing and expose federal and nonfederal actors to punitive financial risk. The bill prioritizes privacy and enforcement over access and oversight, but that choice creates difficult implementation and constitutional questions about agency exposure to damages.
The bill converts an appropriations rider into a statutory FOIA exemption and pairs that with a mixed enforcement regime of administrative fines and private litigation. That design raises practical questions: the FOIA change will block public requests but does not define how ATF should handle narrow law-enforcement or research requests that historically received limited disclosures under controlled conditions.
The Attorney General’s fine authority is structured with per-item assessment, which could produce very large monetary exposure for an inadvertent release when many records or data fields are implicated, but the bill does not specify procedures for mitigating fines in cases of negligence versus willful disclosure.
The private right of action and waiver of sovereign immunity significantly increase litigation risk for federal agencies, but the statute does not include procedural guardrails such as a statute of limitations, requirements for administrative exhaustion, or standards for willfulness. Courts will therefore need to resolve how damages are proved (treble damages versus the statutory per-item floor) and how punitive damages apply.
The bill also ties ‘‘covered disclosure statute’’ to an appropriations proviso; if that appropriations language changes in the future, courts and agencies may face interpretative disputes about the scope of ‘‘protected information.’”
Try it yourself.
Ask a question in plain English, or pick a topic below. Results in seconds.