The public agency is required to tell you the legal basis for not disclosing a record. If you asked for the record in writing, the agency must issue a written denial that contains the legal citation to its authority. Just telling you that the record is "confidential" or "not available" is insufficient.