Department of Homeland Security v. MacLean
The Supreme Court ruled that a fired air marshal's disclosure to a reporter was not "specifically prohibited by law" for whistleblower purposes, because only a TSA regulation — not the underlying statute — barred the disclosure, and regulations don't count as "law" under the whistleblower statute's exception.
The decision means the air marshal can pursue whistleblower protection despite having revealed sensitive security information, and it signals that agencies cannot shield themselves from whistleblower claims simply by writing their own prohibitions into regulations rather than getting Congress to write them into a statute.
“In addition, a broad interpretation of the word “law” could defeat the purpose of the whistleblower statute.”
The majority's concern that agencies could evade whistleblower protections through their own regulations.
How it got here: The Merit Systems Protection Board ruled against MacLean; the Federal Circuit vacated that ruling; the government sought Supreme Court review.
The Case in Depth
What happened
Robert MacLean, a federal air marshal, was briefed on a potential hijacking plot and then learned TSA was cancelling overnight marshal missions from Las Vegas to save hotel costs. Believing this dangerous, he told an MSNBC reporter, prompting Congress to pressure TSA into reversing the cancellations. TSA later discovered MacLean was the source and fired him for disclosing sensitive security information without authorization.
The question before the Court
When a federal air marshal told a reporter that TSA had pulled marshals from overnight flights, did a federal statute "specifically prohibit" that disclosure, stripping him of whistleblower protection?
The Court's answer
No — the Court ruled that MacLean's disclosure was not "specifically prohibited by law." Only a TSA regulation, not a statute, actually barred his disclosure, and the whistleblower law's exception uses the word "law" alone rather than "law, rule, or regulation," a phrase used elsewhere in the same statute. That deliberate word choice meant Congress intended to exclude agency regulations from the exception.
The Court also rejected the government's fallback argument that the underlying statute, 49 U.S.C. §114(r)(1), itself prohibited the disclosure. That statute only tells TSA to write regulations if it decides disclosure would be harmful — it doesn't prohibit anything on its own, so it was the agency's regulation, not Congress's statute, that did the prohibiting.
Curious how the Court got there? See the step-by-step legal reasoning →
Why it matters
Federal employees who blow the whistle on agency decisions they believe endanger public safety keep protection unless a statute itself \u2014 not just an agency regulation \u2014 specifically bars the disclosure. Agencies like TSA cannot immunize themselves from whistleblower suits merely by writing broad rules; Congress or the President would have to act more specifically to close that gap.
What changes now
The Federal Circuit's judgment vacating the Board's decision is affirmed, so MacLean's case returns to the administrative process to determine whether his disclosure otherwise qualifies for whistleblower protection under the statute's other requirements. The Court noted Congress or the President could still close this gap by writing a more specific statutory prohibition or executive order, but as the law stands, MacLean's disclosure was not "specifically prohibited by law."
What this does not decide
The Court did not decide whether MacLean's disclosure meets the whistleblower statute's other requirements, such as reasonably believing it revealed danger to public safety. It also left open how Congress or the President could rewrite the law to bar similar disclosures in the future.
Concurrences and dissents
Dissent — Justice Sotomayor
“But in the interim, at least, the Court has left important decisions regarding the disclosure of critical information completely to the whims of individual employees.”The dissent's warning about the practical risks of the majority's narrow reading.
Justice Sotomayor agreed that regulations don't count as 'law' but disagreed that the underlying statute, §114(r)(1), failed to prohibit the disclosure. She argued the statute's use of 'shall' made regulation mandatory, and that residual agency discretion in applying the statute doesn't erase Congress's own prohibition. She would have held the disclosure was 'prohibited by law' and denied whistleblower protection.
How the Court got there
The legal reasoning, step by step
- The Court examined the whistleblower statute's exception for disclosures 'specifically prohibited by law,' noting Congress used the broader phrase 'law, rule, or regulation' nine other times in the same section but chose the narrower word 'law' alone here — a choice courts treat as deliberate under the principle that Congress acts intentionally when it omits language used elsewhere in the same statute.
- Because the TSA's regulation, not a statute, actually barred MacLean's disclosure, the Court held that a regulation does not qualify as 'law' under the exception, rejecting the government's argument that regulations with 'the force and effect of law' should count.
- The Court then asked whether the underlying statute, 49 U.S.C. §114(r)(1), itself prohibited the disclosure. That statute only directs the TSA to write regulations if the agency 'decides' disclosure would be harmful — it authorizes rulemaking rather than prohibiting anything on its own.
- The Court distinguished a prior FOIA case, Robertson, explaining that a statute giving an agency discretion to prohibit disclosure does not itself create a prohibition; only the agency's exercise of that discretion does, so the resulting bar comes from a regulation, not a law.
- Concluding that neither the regulation nor the statute qualified as a 'law' specifically prohibiting the disclosure, the Court held the exception did not apply to MacLean's disclosure.
Doctrinal impact
Cases affected by this decision
Distinguishes Chrysler Corp. v. Brown (441 U.S. 281)
The Court found this case's rule that regulations can count as 'law' doesn't apply given clear contrary evidence in this statute's text.
Distinguishes Administrator, FAA v. Robertson (422 U.S. 255)
The Court said this FOIA case about exempted information doesn't control a statute about prohibited disclosures.