One facet of using the FOIA legislation is that such requests will GUARANTEE that a file is started on you even if one did not previously exist. If yo you make FOIA requests then it behooves you to include in them at some point (I suggest at least annualy) to make a FOIA of your own records. The reason is that if there is a security question you will at least get a form letter refusing to release the information which should act as a warning bell. Just thought I would mention it since nobody else has made reference to it.