IPRA “As Otherwise Provided by Law”: Only Formally Promulgated Regulations Implementing Clear Legislative Confidentiality Intent Can Bar Disclosure

I. Introduction

In Am. Civ. Liberties Union of N.M. v. N.M. Corr. Dep't (Supreme Court of New Mexico, June 15, 2026), the Court addressed whether the New Mexico Corrections Department (NMCD) could deny an Inspection of Public Records Act (IPRA) request by relying on internal department policies labeling certain materials “confidential.”

The American Civil Liberties Union of New Mexico (ACLU) sought records related to uses of force at the Southern New Mexico Correctional Facility, including incident reports, staff names, and policies governing force, restraints, and chemical agents. NMCD denied the request categorically, asserting that (1) its use-of-force policies were confidential and (2) inmate grievances/complaints were privileged and strictly confidential under NMCD policies.

The central legal issue was the scope of IPRA’s residual exception for records exempt from inspection “as otherwise provided by law,” Section 14-2-1(N), and specifically whether informal agency policies can qualify as “law,” or whether only certain types of administrative regulations may do so.

II. Summary of the Opinion

The Supreme Court affirmed the Court of Appeals and held that IPRA’s catch-all exception, Section 14-2-1(N), incorporates an administrative regulation only when:

  1. the regulation is formally promulgated through rulemaking procedures involving public notice and comment and a public hearing (as applicable); and
  2. the regulation effectuates a statute (or statutes) revealing a clear legislative intent for the confidentiality, secrecy, or nondisclosure of the records at issue.

Because NMCD relied on internal policies that were not shown to have been formally promulgated—and because NMCD pointed only to general enabling statutes that do not clearly express legislative intent for confidentiality—the policies did not qualify as a regulatory bar under Section 14-2-1(N). The Court remanded with instructions to order disclosure to the extent the records are not exempt under another law or an IPRA exception.

The Court also rejected the district court’s “clear necessity” approach (which had allowed withholding if necessary to administer the Corrections Act), explaining that such a standard improperly resembles the abandoned “rule of reason” balancing analysis.

III. Analysis

A. Precedents Cited

1. Defining IPRA’s structure and the catch-all exception

  • Jones v. City of Albuquerque Police Dep't, 2020-NMSC-013: The Court relied on Jones to frame Section 14-2-1(N) as a “‘catch-all’ exception,” and to reinforce that IPRA begins from a pro-disclosure premise.
  • Pacheco v. Hudson, 2018-NMSC-022: Cited for the proposition that the catch-all exception can include “statutory and regulatory bars to disclosure,” as well as constitutional and evidentiary privileges—setting the stage for the Court’s task of clarifying what counts as a “regulatory bar.”
  • Faber v. King, 2015-NMSC-015: Used to emphasize that IPRA must be construed in light of its purpose: broad access and “greatest possible information.”

2. The foundational case: administrative regulations can qualify, but only if properly grounded

  • City of Las Cruces v. Public Employee Labor Relations Board (Public Employee), 1996-NMSC-024: This was the opinion’s anchor. Public Employee held that IPRA’s catch-all exception “contemplates [an administrative] regulation properly promulgated” that has “the force of law,” and that a regulation has such force if promulgated in accordance with a statutory mandate to effectuate the purpose of the statute.

    The 2026 decision treats Public Employee as still valid on its catch-all analysis (while acknowledging that Public Employee’s separate reliance on the rule of reason has been overtaken by later precedent).

3. Eliminating policy balancing: the demise of the “rule of reason”

  • State ex rel. Newsome v. Alarid, 1977-NMSC-076: Newsome created the “rule of reason,” allowing nondisclosure where countervailing public policy or statute would be undermined. The Court referenced Newsome chiefly to show what modern IPRA doctrine rejects: courts making ad hoc policy judgments to craft confidentiality outside statutory/regulatory/privilege sources.
  • Republican Party of N.M. v. N.M. Tax'n & Revenue Dep't, 2012-NMSC-026: This case is the doctrinal pivot. It abandoned the “rule of reason,” holding that courts must confine nondisclosure to: specific IPRA exceptions, statutory or regulatory exceptions, and constitutional/evidentiary privileges. The 2026 Court used Republican Party to justify a narrow approach to regulatory exceptions and to reject tests (like “clear necessity” or penological-interest deference) that would reintroduce balancing.
  • Bd. of Comm'rs v. Las Cruces Sun-News, 2003-NMCA-102 and City of Farmington v. Daily Times, 2009-NMCA-057: Cited to distinguish the nonstatutory “rule of reason” from statutory/regulatory exceptions and to explain how Republican Party narrowed the permissible analysis.

4. What kind of “regulation” counts: legislative rules vs interpretive rules

  • City of Albuquerque v. N.M. Pub. Regul. Comm'n, 2003-NMSC-028: Used to explain agencies’ delegated authority to promulgate “legislative rules” (rules with the force of law) via formal procedures (notice/comment/hearing). The Court relied on this framework to interpret Public Employee’s phrase “properly promulgated.”
  • Princeton Place v. N.M. Hum. Servs. Dep't, Med. Assistance Div., 2022-NMSC-005: Cited for the distinction between legislative rules (binding) and interpretive rules (guidance without the force of law). This case supplied the doctrinal basis for characterizing NMCD’s policies as interpretive because the record did not show formal promulgation.

5. Requiring a confidentiality-focused statutory basis

  • Edenburn v. N.M. Dep't of Health, 2013-NMCA-045: A key comparator: regulations tied to an “organizational” statute (the Public Records Act) could not become a confidentiality bar under IPRA. The Court used Edenburn to reinforce that authorizing statutes must be specifically related to confidentiality or nondisclosure effects.
  • Beck v. State ex rel. Child., Youth & Fams. Dep't, 2024-NMCA-082: Used to illustrate how a regulation can legitimately extend protection to closely related subjects (e.g., foster parents’ identities) where statutes show an intent to protect identities in a sensitive context. Beck helped the Court articulate that legislative intent need not be hyper-explicit, but must be clearly confidentiality-oriented.
  • Libit v. Univ. of N.M. Lobo Club, 2022-NMCA-043: Cited for the interpretive principle that when the Legislature intends exemptions, it often does so expressly (records not public records or not subject to IPRA), supporting the Court’s insistence on clear legislative signals for nondisclosure.
  • Dunn v. N.M. Dep't of Game & Fish, 2020-NMCA-026: Cited for the idea that agencies may not create “additional policy-based” IPRA exceptions absent proper legal authorization—supporting the Court’s resistance to internal policies as standalone exemption sources.

6. Corrections context and public accountability

  • N.M. Found. for Open Gov't v. Corizon Health, 2020-NMCA-014: Invoked to emphasize that allegations of mistreatment and abuse in prisons lie at IPRA’s accountability core, reinforcing the Court’s reluctance to allow broad confidentiality via internal policy.
  • Farmer v. Brennan, 511 U.S. 825 (1994), Turner v. Safley, 482 U.S. 78 (1987), and Overton v. Bazzetta, 539 U.S. 126 (2003): Raised by NMCD to argue prison safety and deference to prison administrators. The Court rejected Turner as “inapposite” because IPRA concerns legislative intent about transparency rather than constitutional review of prison rules restricting inmates’ rights. The Court also warned that importing Turner would revive balancing.
  • State v. Swayne, 2025-NMSC-047: Cited to describe Turner as a form of rational-basis review in the prison-rule context, which the Court refused to graft onto IPRA.

7. Standard interpretive and review principles

  • State v. Johnson, 2001-NMSC-001: Cited for de novo review of statutory interpretation.

B. Legal Reasoning

1. The Court’s clarified two-part test for regulatory bars under Section 14-2-1(N)

The Court reaffirmed Public Employee’s core teaching (regulations can count as “law”), but cabined it with a clarified framework:

  1. Formality requirement: the “regulation” must be a legislative rule—i.e., promulgated through formal procedures (public notice/comment and a public hearing, as required by applicable administrative law).
  2. Legislative-intent requirement: the regulation must implement (“effectuate”) a statute that clearly indicates confidentiality, secrecy, or nondisclosure for the relevant records (not merely a broad grant of rulemaking power).

This approach operationalizes Republican Party’s insistence that secrecy be grounded in enumerated sources rather than judicial or agency policy balancing.

2. Application to NMCD’s policies: failure on both prongs

(a) Not formally promulgated.

NMCD did not show that its confidentiality policies were adopted through formal rulemaking. The Court rejected NMCD’s argument that it was exempt from such procedures. Although NMCD invoked the State Rules Act definition excluding certain inmate-management rules (Section 14-4-2(F)), the Court held that policies restricting public inspection “plainly affect the public at large,” making them the kind of regulation that triggers formal procedures.

The Court also relied on Section 9-3-5(E), which requires a public hearing before adopting any regulation “affecting any person or agency outside” NMCD, and reasoned that few actions more directly affect outsiders than withholding public records. Because the policies were not shown to be promulgated under these procedures, they were interpretive rules under Princeton Place—potentially persuasive internally, but not “law” capable of creating an enforceable IPRA bar.

(b) No clear legislative intent for confidentiality in the authorizing statutes NMCD identified.

Even assuming formal promulgation, NMCD relied only on general enabling provisions (Section 9-3-5(E) and Section 33-1-6(B)) authorizing rules “necessary” to carry out departmental duties. The Court held that such generalized grants—without confidentiality-specific signals—do not express the “clear legislative intent” required to narrow IPRA’s disclosure mandate.

The Court rejected NMCD’s attempt to derive implicit confidentiality authority from prison safety concerns and to import Turner’s “legitimate penological interests” deference. Doing so would require weighing competing policy interests, which the Court viewed as inconsistent with Republican Party and as a backdoor revival of the abandoned rule-of-reason balancing.

3. Institutional implication: agencies must go to the Legislature (or satisfy the test)

The Court acknowledged that NMCD can issue interpretive guidance for internal record handling. But if NMCD believes certain categories should be exempt, the Court’s message is structural: it must either (1) rely on an existing statute/IPRA exception/privilege that covers the records, or (2) pursue legislative authorization and then promulgate a legislative rule through formal procedures that implements a clearly confidentiality-oriented statute.

C. Impact

1. Stronger barrier to agency-created secrecy

The decision significantly limits agencies’ ability to deny IPRA requests based on internal manuals, policy labels, or confidentiality legends. Unless the agency can point to (a) a formally promulgated regulation and (b) a confidentiality-intent statute that regulation effectuates, the catch-all exception will not apply.

2. Greater predictability and uniformity in IPRA litigation

By articulating a clear two-prong test, the Court reduces ad hoc outcomes and discourages trial-court experimentation with necessity-based or safety-based balancing standards (such as the district court’s “clear necessity” approach).

3. Procedural incentives: formal rulemaking and legislative specificity

Agencies seeking confidentiality must now focus on:

  • formal rulemaking (record-building, public notice, and hearing); and
  • demonstrable legislative intent for confidentiality, not merely broad administrative necessity.

4. Corrections and high-accountability domains

In the prison context, the decision underscores that safety rationales—however compelling—do not themselves create IPRA exemptions. Absent a confidentiality-intent statute (and a properly promulgated implementing regulation), records about use of force remain presumptively disclosable, subject only to other applicable IPRA exceptions or laws.

IV. Complex Concepts Simplified

  • IPRA “catch-all” (Section 14-2-1(N)): A provision allowing nondisclosure when another law (not IPRA itself) makes records confidential. This case explains that “law” can include some regulations, but only if they meet strict criteria.
  • Legislative rule vs interpretive rule: A legislative rule is adopted through formal procedures and is binding like law. An interpretive rule is internal guidance; it may be persuasive but cannot by itself take away public rights created by statute.
  • Formal promulgation (notice, comment, hearing): The structured process that legitimizes a rule as binding on the public. The Court treated this as essential when an agency attempts to restrict public access to records.
  • “Clear legislative intent” for confidentiality: Not necessarily a magic phrase, but the statute(s) being implemented must clearly point toward secrecy/nondisclosure for the type of information at issue. General “do your job” enabling statutes are not enough.
  • Rule of reason: The former doctrine letting courts withhold records based on broad policy balancing. New Mexico rejected it in Republican Party; this case prevents it from returning through “necessity” or “penological interests” tests.
  • Certiorari and de novo review: Certiorari is discretionary Supreme Court review of a lower appellate decision. De novo review means the Court decides the legal question anew, without deferring to lower courts’ interpretations.

V. Conclusion

Am. Civ. Liberties Union of N.M. v. N.M. Corr. Dep't establishes a clarified, restrictive rule for when an administrative regulation can qualify as “law” under IPRA’s catch-all exception: the regulation must be formally promulgated and must implement a statute demonstrating a clear legislative intent to keep the records confidential.

The Court’s reasoning reinforces IPRA’s foundational premise—disclosure is the rule, secrecy the exception—and ensures that any regulatory move toward secrecy must be publicly vetted (procedurally) and democratically anchored (substantively) in legislative intent rather than agency preference or judicial policy balancing.