When a government agency withholds information from a requester, it typically must invoke one of nine FOIA exemptions that cover everything from national security to personal privacy.