Controlled Unclassified Information (CUI)

Home > Controlled Unclassified Information (CUI) > CUI Category: General Privacy

CUI Category: General Privacy

 

Category Description:

Refers to personal information, or, in some cases, "personally identifiable information," as defined in OMB M-17-12, or "means of identification" as defined in 18 USC 1028(d)(7).
Category Marking: PRVCY
Banner Format and Marking Notes:
Snippet

Banner Format:

CUI//Category Marking//Limited Dissemination Control

 

Marking Notes:

  • Category Marking is optional when marking Basic CUI unless required by agency policy. Example: CUI//Limited Dissemination Control
  • Category Marking preceded by "SP-" is required when marking Specified CUI. Example: CUI//SP-Category Marking//Limited Dissemination Control
  • Whether CUI is Basic or Specified is determined by the applicable Safeguarding and/or Dissemination Authority for a given instance of CUI.
  • Separate multiple Category Markings by a single forward slash (/) and list Category Markings alphabetically. Example: CUI//Category Marking A/Category Marking B//Limited Dissemination Control
  • Category Markings for Specified CUI precede Category Markings for Basic CUI. Example: CUI//SP-Category Marking/Category Marking//Limited Dissemination Control
  • Separate multiple Limited Dissemination Controls by a single forward slash (/). Example: CUI//Category Marking//Limited Dissemination Control/Limited Dissemination Control
  • Reference 32 CFR 2002.20, CUI Marking Handbook, Limited Dissemination Controls and individual agency policy for additional and specific marking guidelines.

 

Snippet

Notes for Safeguarding, Dissemination and Sanction Authorities:

  • CUI Specified authorities include specific handling practices that differ from general CUI requirements. For Specified authorities, reference individual Safeguarding/Dissemination control citations for distinct requirements
  • Whether CUI is Basic or Specified is determined by the applicable Safeguarding and/or Dissemination Authority for that CUI.
  • Each "Safeguarding and/or Dissemination Authority" citation links to the statute, regulation or government-wide policy authorizing the control of that information as CUI.
  • Each "Sanctions" authority links to the statute, regulation or government-wide policy that includes penalties for CUI misuse of CUI for the associated "Safeguarding and/or Dissemination Authority" on the same line.
Safeguarding and/or Dissemination Authority Basic or
Specified		 Sanctions
5 USC 552a(b) Basic 5 USC 552a(i)
42 USC 16918(b)(2) Basic  
29 CFR 2400.4 Basic  
29 CFR 2705.9 Basic  
12 CFR 792.60 Basic  
12 CFR 792.69(c) Basic  
17 CFR 146.6(a) Basic  
18 CFR 3b.225(a) Basic  
5 CFR 297.401 Basic  
OMB M-17-12 Specified  
48 CFR 22.1024 Basic  
20 CFR 401.100 Basic  
20 CFR 401.105(b) Basic  
11 CFR 1.14 Basic  
OMB Circular A-130 Basic  

 

Snippet

Authority links are updated based on regular re-publication of the United States Code and Code of Federal Regulations, and the CUI Registry maintenance schedule.

 

Top