Controlled Unclassified Information
Controlled Unclassified Information (CUI) is a category of unclassified information overseen by the National Archives and Records Administration.
Definition
CUI exists within the paradigm of classification for government-generated information. It specifically refers to information that is not eligible for classification. Access is contingent on a lawful government purpose; a need-to-know is generally not required, although laws can carve out specific requirements.
If someone who does not meet those criteria accesses the information, there is an unauthorized disclosure (UD).
CUI generally includes all of PII, PHI, and CTI.
History
The creation of CUI, and the assignment of oversight to NARA, was implemented to replace an information regime that was complex and seen as being weaponized to circumvent FOIA requests.
Several departments, especially the U.S. Department of Defense, have implemented labels for controlling unclassified information.
- For Official Use Only (FOUO)
- Sensitive But Unclassified (SBU)
- Law Enforcement Sensitive (LES)
- and so on