Controlled Unclassified Information (CUI)

Home > Controlled Unclassified Information (CUI) > CUI Category: General Privacy

CUI Category: General Privacy

Banner Marking for Specified Authorities: CUI//SP-PRVCY

Banner Marking for Basic Authorities: CUI

Category Description:

Refers to personal information, or, in some cases, "personally identifiable information," as defined in OMB M-17-12, or "means of identification" as defined in 18 USC 1028(d)(7).
Category Marking: PRVCY
Alternative Banner Marking for Basic Authorities: CUI//PRVCY
Banner Format and Marking Notes:
Snippet

Banner Format:

CUI//Category Marking//Limited Dissemination Control

 

Marking Notes:

  • The CUI Control Marking may consist of either the word “CONTROLLED” or the acronym “CUI”, depending on agency policy.
  • Category marking is optional when marking Basic CUI unless required by agency policy. Example: CUI//Limited Dissemination Control.
  • Category Marking preceded by "SP-" is required when marking Specified CUI. Example: CUI//SP-Category Marking//Limited Dissemination Control
  • Whether CUI is Basic or Specified is determined by the applicable Safeguarding and/or Dissemination Authority for a given instance of CUI.
  • Separate multiple Category Markings by a single forward slash (/) and list Category Markings alphabetically. Example: CUI//Category Marking A/Category Marking B//Limited Dissemination Control
  • Category Markings for Specified CUI precede Category Markings for Basic CUI. Example: CUI//SP-Category Marking/Category Marking//Limited Dissemination Control
  • Separate multiple Limited Dissemination Controls by a single forward slash (/). Example: CUI//Category Marking//Limited Dissemination Control/Limited Dissemination Control
  • Reference 32 CFR 2002.20, CUI Marking Handbook, Limited Dissemination Controls and individual agency policy for additional and specific marking guidelines

 

 

Snippet

Notes for Safeguarding, Dissemination and Sanction Authorities:

  • CUI Specified authorities include specific handling practices that differ from general CUI requirements. For Specified authorities, reference individual Safeguarding/Dissemination control citations for distinct requirements
  • Whether CUI is Basic or Specified is determined by the applicable Safeguarding and/or Dissemination Authority for that CUI.
  • Each "Safeguarding and/or Dissemination Authority" citation links to the statute, regulation or government-wide policy authorizing the control of that information as CUI.
  • Each "Sanctions" authority links to the statute, regulation or government-wide policy that includes penalties for CUI misuse of CUI for the associated "Safeguarding and/or Dissemination Authority" on the same line.
Safeguarding and/or Dissemination Authority Basic or
Specified		 Banner Marking Sanctions
5 USC 552a(b) Basic CUI 5 USC 552a(i)
34 USC 20920(b)(2) (previously 42 USC 16918(b)(2)) Basic CUI  
29 CFR 2400.4 Basic CUI  
29 CFR 2705.9 Basic CUI  
12 CFR 792.60 Basic CUI  
12 CFR 792.69(c) Basic CUI  
17 CFR 146.6(a) Basic CUI  
18 CFR 3b.225(a) Basic CUI  
5 CFR 297.401 Basic CUI  
OMB M-17-12 Specified CUI//SP-PRVCY  
48 CFR 22.1024 Basic CUI  
20 CFR 401.100 Basic CUI  
20 CFR 401.105(b) Basic CUI  
11 CFR 1.14 Basic CUI  
OMB Circular A-130 Basic CUI  

 

Snippet

Authority links are updated based on regular re-publication of the United States Code and Code of Federal Regulations, and the CUI Registry maintenance schedule.

 

Top