Skip to main content
Print

Sleuth Report: Rye Examines DOJ’s Epstein Files Review Protocol

InvestigationHow DOJ sorted, redacted and withheld records during its Epstein files review.
Original sleuthRye, writing at Document Zero
Central evidenceA nine page DOJ protocol dated January 4, 2026 and a two page withholding crosswalk.
Main findingThe documents distinguish review classifications from legal withholding grounds. They reveal important decisions requiring independent scrutiny, but do not quantify every classification or establish a universal motive for missing records.
Legal frameworkThe enacted Epstein Files Transparency Act. H.R. 9694 is analyzed separately as proposed legislation.
Court record examinedPhang v. Blanche, No. 1:26-cv-01417, including June and September rulings and identified filings through October 1, 2026.
Evidence identifiersDOJ media IDs 1426281 and 1438931. No EFTA Bates number has been verified for either policy document.

Important key takeaways

  • The protocol expressly ends the individual reviewer’s redaction work for documents tagged Non-responsive or Duplicate. Error and Foreign language are separate tags, and DOJ later acknowledged that affected material had not been produced.
  • A footnote directs reviewers to classify certain victim records as nonresponsive. Another passage treats school records as potentially protected responsive material. That tension deserves examination without exposing survivors’ information.
  • DOJ reported more than six million potentially responsive pages collected and nearly 3.5 million pages released in total by January 30. Those figures do not establish how many unique responsive pages were improperly withheld.
  • The crosswalk openly identifies common law privilege and other statutory protections. Its categories describe DOJ’s legal position; they do not themselves decide whether each withholding complied with the Act.
  • Later court orders matter. The September 16 ruling rejected DOJ’s rationale for leaving foreign language material unreviewed, but reserved important questions about privacy redactions and the sufficiency of its published report.
  • The introduced H.R. 9694 would strengthen enforcement and change redaction language. Its proposed remedies should not be described as rights already created by enacted law.

What Rye brought into focus

Rye’s September 5, 2026 investigation directs attention to the administrative decisions that precede publication of the Epstein files. Its central concern is whether responsiveness screening, duplicate coding and additional withholding theories leave important decisions difficult to audit. This report credits that document trail while independently examining the official texts and subsequent court records. The evidence supports scrutiny of the review process. It does not support treating every unpublished page as deliberately concealed evidence.


What the enacted law requires

The Epstein Files Transparency Act became law on November 19, 2025. Section 2(a) required publication within 30 days of unclassified DOJ records relating to nine subjects: Epstein; Maxwell; relevant travel; people connected to specified criminal or investigative matters; entities tied or allegedly tied to trafficking or financial networks; agreements involving Epstein or associates; internal charging and investigative decisions; destruction or concealment of records; and detention or death. The required format is searchable and downloadable. Read Sections 1 and 2(a).

Section 2(b) prohibits withholding, delay or redaction based on embarrassment, reputational harm or political sensitivity. Section 2(c)(1) permits withholding or redaction of segregable portions involving protected victim information, legally defined child sexual abuse material, narrowly tailored and temporary protection of active federal investigations or prosecutions, images of death or physical harm, and properly classified information. Separate provisions address declassification, unclassified summaries and later classification decisions. Read Section 2(b) and 2(c).

Two reporting requirements are particularly important. Section 2(c)(2) requires written justification for redactions, published in the Federal Register and submitted to Congress. Section 3 requires a report listing categories released and withheld, a summary of redactions and their legal bases, and officials and politically exposed persons named in released material. A summary of categories and a justification linked to particular redactions serve different auditing purposes. Whether the same report satisfies both statutory duties became a disputed legal question. Compare Sections 2(c)(2) and 3.

For the broader distinction between FOIA, court releases and this separate disclosure statute, see EpsteinWiki’s FOIA and Government Releases guide.


How the five review tags actually work

The protocol’s responsiveness section begins on printed page 2. The list of five tags appears on printed page 3. Reviewers must select one tag and evaluate each document independently, including evaluating an email and its attachments separately. Protocol, pages 2 and 3.

  • Responsive. The document relates to one of the nine statutory subjects. The reviewer proceeds to consider content tags and redactions.
  • Non-responsive. The document does not relate to those subjects. The instruction explicitly says to move to the next document without applying redactions or other tags.
  • Duplicate. The examples include intermediate emails where the most inclusive chain has already been reviewed and redacted for production, and material already released through official channels. This category also expressly tells the reviewer to move on.
  • Error. The document has a technical viewing problem.
  • Foreign language. The document is in a foreign language.

The last two labels do not carry the same explicit instruction to end review in the tag list. Nevertheless, DOJ’s January 30 letter separately states that foreign language pages and some files that could not be uploaded because of technical problems had not been reviewed for responsiveness and had not been produced. That letter establishes a real production gap for those categories at that time. The protocol alone does not establish how they were handled at every later stage. Protocol, page 3; January 30 letter, page 5.

The earlier December 19 letter said material that could not be uploaded because of size or compatibility issues was reviewed and redacted in its native format. The January 30 letter describes some technically incompatible material that was not reviewed or produced. Those statements may concern different subsets or stages, so they do not alone establish a reversal of policy. They do show why a single Error label is insufficient to reconstruct the handling of each affected file. December 19 letter, page 3; January 30 letter, page 5.

A duplicate classification can represent ordinary consolidation rather than suppression. Its reliability depends on whether the produced version truly preserves the relevant content. An error classification can leave responsiveness undetermined. A nonresponsive classification is a substantive scope decision. These outcomes need separate counts and review histories; combining them into one unexplained missing page total obscures what actually happened.

Nor does the absence of a redaction require the conclusion that no internal record exists. The protocol itself requires a classification in the review platform. It does not supply a public disposition register or prove that internal coding, version histories and quality control records were never retained. The supported concern is the ability of outsiders to verify those decisions.


Victim protection and the classification problem

Footnote 2 on page 5 instructs that victim records such as school records, immunization records and yearbooks should be treated as nonresponsive, so redaction is unnecessary. Page 7, however, describes school records as an example of personal material potentially protected under Section 2(c)(1)(A). Read together, the passages raise a concrete question about when a record is classified outside the production scope and when it is classified as responsive but protected. Protocol, page 5 footnote 2 and page 7.

That distinction matters for accounting even when the correct public outcome is that sensitive information remains undisclosed. A privacy preserving audit could identify the category, decision and reviewing authority without publishing the underlying personal records. The footnote is evidence of guidance, not proof that any particular school or medical record was wrongly classified.

The protocol defines protected victims broadly, including people identified or self identified to DOJ, directly or through counsel, as potential victims of sexual exploitation or misconduct by Epstein or Maxwell. It directs reviewers to protect identifying context, relatives and associates where disclosure could reveal a victim. It also warns that automatic highlighting can miss or overinclude names and does not work for spreadsheets or images. These instructions are relevant safeguards as well as sources of possible inconsistent decisions. Protocol, pages 1, 2 and 5 through 7.

Image guidance directs facial redactions for women except Maxwell and well known female public figures, and protection of apparent minors’ faces and names. Reviewers are told to prefer partial redaction where possible. The document also directs redaction of descriptions of child sexual abuse in statements and reports. These are DOJ’s review instructions; their presence is not a judicial finding that every application is compelled by the statutory definition. Protocol, pages 4 and 7.

A redacted identity does not establish that the person committed misconduct. The reviewed documents provide no basis for trying to identify protected survivors from contextual clues.


What else reviewers were told to record

Responsive records could receive content tags for travel, agreements, charging decisions, destruction of records and FBI interview reports. A dedicated Notes field was reserved for government officials and politically exposed persons named or referenced in released materials. Other explanatory notes were directed into separate freeform fields, including RN-Redaction and RN-Other. Questions were to be escalated by email. Protocol, pages 3 and 4.

The protocol instructs reviewers to record applicable redaction categories and to flag a document as z_Redacted in Full where it would otherwise be entirely obscured and not produced. The available categories include victim identifying information, other personal information, protected imagery, ongoing federal investigations, classified material and sealed records. These platform fields show that some internal documentation was contemplated. They do not show whether a complete public record of those decisions was produced. Protocol, page 5.

Page 8 separately directs redaction of specified government employee names, confidential sources, personal identifiers and health information, with stated exceptions for certain public officials and public facing personnel. These instructions reach beyond a simple list of survivor names. They make the legal relationship between the Act and other privacy protections consequential. Protocol, page 8.


Privilege and financial secrecy in the crosswalk

The two page crosswalk maps DOJ withholding categories to corresponding FOIA exemptions. Its first, third and fourth categories concern privacy, ongoing law enforcement proceedings and graphic or sensitive depictions of harm. Category 5 identifies deliberative process, attorney work product and attorney client privilege, with FOIA exemption 5 in the corresponding column. Its stated authority is common law, footnoted to DOJ’s February 14 report, rather than a numbered withholding exception in the Epstein Act. Crosswalk, both pages.

DOJ had already set out its theory in the December 19 letter: longstanding privileges remain unless Congress clearly displaces them. The January protocol tells reviewers to assess those privileges, including protected communications involving Epstein or Maxwell and their lawyers, while cautioning against applying privilege too liberally. This is an affirmative legal position requiring evaluation, not an undisclosed category inferred solely from a blacked out page. December 19 letter, pages 2 and 3; protocol, page 9.

Category 2 combines child sexual abuse material with information protected by other law. The column references the Privacy Act and lists, through FOIA exemption 3, the Bank Secrecy Act, Pen Register Act, child victim and witness protections, Internal Revenue Code Section 6103 and Federal Rule of Criminal Procedure 6(e). The table’s inclusion of those authorities documents DOJ’s approach. It does not turn financial records into child sexual abuse material, and it does not by itself resolve conflicts between disclosure and secrecy laws. Crosswalk, page 1.

The protocol makes a narrower financial distinction worth preserving. Tax records generally are to be redacted only for personal identifying information. Tax returns and suspicious activity reports, or SARs, are directed to be marked for full redaction, with a reviewer note. Describing all tax or financial evidence as categorically withheld would exceed that text. Protocol, page 9.

These instructions matter because Section 2(a)(5) expressly covers entities with known or alleged ties to Epstein’s financial networks. Determining the lawfulness of a specific withholding would require the document, the asserted authority and any controlling order or legal ruling. For context on the different evidentiary uses of financial material, see Financial Records.


What the production totals establish

DOJ’s January 30 letter says its collection identified more than six million pages as potentially responsive. It reports more than three million additional responsive pages released that day and nearly 3.5 million pages released overall. The associated press release gives the same distinction between the additional release and cumulative production. The relevant total is therefore not simply three million published pages. January 30 letter, pages 1 and 2; DOJ release announcement.

The letter attributes a smaller unique responsive set to broad collection and duplication across offices. It reports approximately 200,000 pages redacted or withheld on privilege grounds. That figure combines redaction and withholding; it is not a count of 200,000 wholly missing pages. DOJ also says no files were withheld or redacted on national defense or foreign policy classification grounds. January 30 letter, pages 2 and 4.

The difference between collected and produced totals cannot be allocated among unique duplicates, nonresponsive material, partially redacted pages, complete withholdings, foreign language material and technical failures from these figures alone. The documents do not provide a complete reconciliation. They also do not quantify how much of the gap was incorrect.

DOJ’s account describes more than 500 reviewers, a second level of sample based review by 40 specialized attorneys and additional district specific quality controls. It acknowledges likely inconsistencies, updates to victim designations and previously applied redactions in source documents. Those explanations belong beside the criticism because they describe how DOJ says it tried to manage errors. They are institutional claims, not an independent validation of every result. January 30 letter, pages 3 through 5.


The published justification and the court’s actual rulings

On August 27, 2026, DOJ published its February 14 Section 3 report in the Federal Register. The notice describes categories released and withheld, a summary of redactions and their legal bases, and a list of officials and politically exposed persons. The report supplies category level explanations rather than an entry identifying each individual redaction. Federal Register, pages 55356 through 55362.

The legal consequences require care. In Phang v. Blanche, Judge Emmet G. Sullivan’s June 25 opinion granted preliminary relief. It found Phang had established Article III standing and that FOIA did not provide an adequate remedy for the claims presented. DOJ had concentrated on threshold arguments and did not substantively answer the merits arguments in the pending motion. The court treated those unaddressed arguments as conceded and found a likelihood of success on the relevant APA claims. That procedural ruling should not be expanded into a final adjudication that every withholding category or every unpublished page was unlawful. June 25 opinion, pages 29 through 36 and 48.

The September 16 opinion and order significantly develops that record. After private review, the court accepted documentation for certain victim redactions and discharged several show cause requirements. It confirmed that some challenged redactions covered private email addresses, while leaving the legal question about Privacy Act redactions for subsequent proceedings. The court also required supporting documentation for three other disputed victim name redactions, so its acceptance of some explanations did not resolve every challenged redaction. September 16 opinion, pages 9 through 12.

For handwritten notes underlying four FBI interview reports, the court rejected DOJ’s assertion that the notes were duplicates of the typed reports. It ordered both redacted and unredacted versions for private judicial review. This is a concrete finding about specified records; it does not establish the error rate for every duplicate classification. September 16 opinion, pages 12 and 13.

The court also rejected DOJ’s stated rationale for failing to begin review of foreign language material, finding no support for administrative inconvenience or congressional silence excusing compliance. It ordered review and production to begin for material that may be subject to the Act, while considering a contempt finding premature. September 16 opinion, pages 14 through 16.

On the reporting issue, the court discharged the show cause requirement after the Federal Register publication. It expressly left open whether the Section 3 report satisfied Section 2(c)(2), because the earlier motion had challenged failure to publish rather than litigated the required contents of the justification. Thus, neither a categorical approval of the report nor a final ruling that each redaction already requires a separate ledger entry follows from this order. September 16 opinion, pages 17 and 18.

On September 21, the court denied DOJ’s requested partial stay but separately imposed a temporary stay of the foreign language review requirement to allow an application to the appeals court. Those two parts must be read together. The order did not simply leave the September 24 review deadline unaltered. September 21 order, pages 4 and 5.

DOJ’s September 24 answer denied noncompliance. Its October 1 filings sought judgment on the pleadings and postponement of the administrative record requirement. These are DOJ’s litigation positions, not rulings granting that relief. The latter motion also records Phang’s opposition and DOJ’s assertion that relevant processing records were already publicly available through the Epstein Library and FBI Vault. Answer, page 2; administrative record motion, pages 1 through 4; motion for judgment, page 1.

The procedural account here is bounded by those identified primary filings through October 1, 2026. It does not establish the disposition of later motions, later appellate action or the case’s final outcome.


What H.R. 9694 would change

H.R. 9694, titled the Epstein Files Transparency Act II, was introduced in the House on July 15, 2026 and referred to the Judiciary Committee. The official bill status data reviewed for this report lists that referral as the latest House action. The following analysis concerns the introduced bill, not enacted amendments. Introduced text; official status data.

  • New enforcement mechanisms. The bill would authorize specified actions by state attorneys general, district attorneys, other authorized state officers, victims and members of Congress, subject to its stated provisions.
  • Victim access. It would provide access to records relating to the requesting victim, expressly including FBI interview reports, while retaining protection for other victims’ personal information and limiting access to material related to the requester.
  • State access. It would provide access and copies for specified state investigations and proceedings, address use and protective orders, and remove the stated DOJ Touhy regulation requirements for covered requests.
  • Congressional access. It would require full access within seven calendar days of a written request by a member, and provide a separate notice and enforcement process for alleged noncompliance.
  • Privilege. It would expressly bar invocation of common law privileges for covered material except as permitted under Section 2(c).
  • Redaction justification. It would replace the statutory phrase “All redactions” with “Each redaction.”
  • Classification. It would remove Section 2(c)(1)(E), while adding procedures for secure review of classified material and preserving a rule that does not itself authorize public release except under Section 2(c)(3).
  • Penalties. It would address application of four existing criminal statutes while expressly retaining their relevant mental state requirements.

These provisions are in the introduced bill, Section 2. Its victim definition requires direct harm and contains an exclusion concerning participation in the underlying misconduct, with an exception where involvement originated in being trafficked or abused. A redacted name alone does not dispense with those qualifications.

The bill does not rewrite the nine subject categories in Section 2(a) or prescribe a complete public register of every review tag. However, its new enforcement language expressly reaches alleged unlawful withholding, delay, concealment and failure to produce. It would therefore be too categorical to say that scope decisions would remain immune from challenge merely because the nine subject categories stay unchanged. Whether a particular challenge succeeds would depend on the enacted text, the facts and judicial interpretation.

The common law privilege clause also should not be described as an express repeal of every separate secrecy statute or court rule listed in the crosswalk. The relationship between those authorities and particular access provisions would still require legal analysis. The proposed wording is evidence of legislative intent to strengthen enforcement, not a completed resolution of every dispute.


Evidence appearances and reliable identifiers

The central policy documents are authenticated here by their official DOJ locations, titles and contents: media ID 1426281 for the nine page Attorney Review Protocol and media ID 1438931 for the two page crosswalk. No EFTA Bates number has been verified for either. Assigning one would create a false link to the production corpus. Open the protocol; open the crosswalk.

The legal record supplies additional stable identifiers: Public Law 119-38; H.R. 9694, introduced House version; Federal Register document 2026-17533 at 91 FR 55356; and Phang v. Blanche, No. 1:26-cv-01417, ECF 16, 43, 49, 50, 51 and 52. These identify the actual instruments supporting the analysis rather than treating a commentary citation as primary evidence.

ECF 43 identifies the FBI reports associated with the ordered underlying notes as EFTA01245620, EFTA02858481, EFTA02858491 and EFTA02858495. These numbers are verified as references in the court’s order; the underlying interview reports have not been independently checked here. They identify the interview reports discussed there, not the January review protocol, the crosswalk or a finding that an allegation in an interview was substantiated. September 16 opinion, page 13.


What remains to be established

The strongest next evidentiary step is a reconciliation between collected material, review decisions and public production. Useful information would include document identifiers, source collections, responsiveness decisions, links between duplicate copies, applied legal grounds, production identifiers and documented changes after review. Privacy safeguards remain essential; accountability does not require exposing protected survivor records.

The present documents do not provide a complete count by tag, a validated rate of duplicate errors, the full handling history of technical failures, or a document by document determination of lawful and unlawful withholding. They also do not prove a coordinated intent to protect any particular public figure. A reference to a person in a released record, a proposed indictment or a government list is not itself a finding of criminal conduct.

The DOJ Inspector General announced an audit on April 23, 2026 addressing collection and production, withholding and redaction guidance, and responses to publication problems. That announcement establishes an oversight process and promised a public report when complete; it contains no audit findings. Read the audit announcement.

The practical conclusion is specific: the review protocol, production letters, crosswalk and court rulings offer a testable record of how disclosure decisions were made. They support scrutiny of classification and withholding choices, along with scrutiny of the safeguards used to protect survivors. Final conclusions about particular missing records require the underlying decision history and the applicable legal determination.


Sources

Previous Sleuth Report: Rusty Shackleford Archive Image Gallery
Next Sleuth Report: Sarah Kellen and Jeffrey Epstein’s Recruitment System
Table of Contents