Controlled Unclassified Information (CUI)

CUI Registry: Change Log

The Change Log reflects changes to CUI categories, markings, authorities, and limited dissemination controls, such as addition, deletion, or transfer of information from one category/subcategory or authority to another.

The Change Log does not reflect regular maintenance of the same authority from one version of the United States Code (USC) or Code of Federal Regulations (CFR) to the next.   



2022-09-09  Added authority 10 CFR 1004.13 to the CUI "Critical Energy Infrastructure Information" category.
2021-10-01 Added authority 10 USC 424 to the CUI "Internal Data" category and added RELIDO to the limited dissemination control markings list.
2021-08-19 Added provisional authorities to the CUI "Health Information" category.
2021-07-27 Updated  "Archeological Resources" category to reflect changes to Basic.
2021-04-29 Updated "Physical Security" category authority to reflect change to Basic.
2021-04-05 Updated the US Code citation for "Ammonium Nitrate" authority.
2021-03-30 For "Physical Security" and "Net Worth" pages, updated the alternate banner marking for basic authorities. 
2021-03-30 Registry page for "Emergency Management" changed to update the authority link for Federal Continuity Directive 1.
2021-03-25 Registry page for "Information Systems Vulnerability Information" changed to update the dissemination authority reference for OMB-M-17-05. 
2021-03-22 Registry page for "Physical Security" changed to reflect new GSA PBS 3490.3 authority update.
2021-03-03 Registry page updated. Changed "Physical Security" authority from Specified to Basic. 
2020-09-22 Registry page updated to reflect "Net Worth" and "Patent Applications" authorities being moved from Specified to Basic
2020-04-13 New category added: Operations Security
2020-04-13 CUI Registry marking list updated to include banner marking. For categories covered by both Basic and Specified authorities, separate columns for Basic and Specified banner markings are included.

CUI Registry category pages updated to add:

  • Subheader for banner marking. For categories covered by both Basic and Specified authorities, separate subheaders for Basic and Specified authorities are included.
  • Alternative banner marking for Basic authorities where applicable
  • Additional information to banner format and marking notes to clarify that the CUI control marking may consist of either the word “CONTROLLED” or the acronym “CUI," depending on agency policy.
  • Additional information added to provisional category information to direct that in case of overlap between provisional and active CUI categories, any applicable requirements from existing categories must be followed.
  • Banner marking for each authority within every category.

"System for Award Management" category updated as follows:

  • Category name changed to "Entity Registration Information"
  • Category description modified from "Relating to the primary United States Government system for contractor registration and awards" to "Related to non-public information collected during entity registration in the System for Award Management (SAM), the common source of vendor data for the United States Government."



"Legal Privilege" category updated as follows:

  • Limited dissemination controls note added to description
  • Marking changed from PRIV to PRIVILEGE
  • Federal Rules of Evidence (Rules 501 and 502) added as Basic authorities

Limited dissemination controls added:

  • Attorney-client
  • Attorney work product

The "Census" category page was updated as follows:

Authorities (13 USC 8(b) and 13 USC 9(a)) are now depicted as Specified authorities.  

Category description modified.  


Related to information gathered by the Bureau of the Census during the process of collecting, compiling, evaluating, analyzing of demographic, economic, and social data pertaining, at a specified time, to any or all persons in the United States.


Related to information gathered by the Bureau of the Census during the process of collecting, compiling, evaluating, analyzing of demographic, economic, and social data pertaining at a specified time to any or all persons in the United States and dissemination is limited to those with special sworn status, who may only use the data for statistical purposes and only for those statistical purposes for which the data was supplied. 

2018-10-29 New categories added:
  • Accident Investigation
  • Legislative Materials
  • Taxpayer Advocate Information
  • Written Determinations
  • Toxic Substances
2018-10-29 Category descriptions updated, authorities and sanctions added for:
  • Bank Secrecy
  • Federal Taxpayer Information
  • Tax Convention
2018-10-29 Witness Protection category:
  • Sanction replaced
2018-10-29 New authorities added to categories:
  • Administrative Proceedings
  • Genetic Information
  • Health Information
  • Informant
  • Legal Privilege
  • Whistleblower Identity
2018-09-26 Investigation category updated:
  • New description
  • Additional authority
  • 2018-09-26 New category added:
    • Consumer Complaint Information
    2018-09-26 Created new Organizational Index Grouping (Provisional), and 9 new provisional categories:
    1. Homeland Security Agreement Information
    2. Homeland Security Enforcement Information
    3. Information Systems Vulnerability Information - Homeland
    4. International Agreement Information - Homeland
    5. Operations Security Information
    6. Personnel Security Information
    7. Physical Security - Homeland
    8. Privacy Information
    9. Sensitive Personally Identifiable Information
    2018-09-26 Moved 4 categories to new Organizational Index Grouping "Defense":
    1. Controlled Technical Information
    2. DoD Critical Infrastructure Security Information
    3. Naval Nuclear Propulsion Information
    4. Unclassified Controlled Nuclear Information - Defense
    2018-09-26 New category added:
    • Financial Supervision Information
    2018-04-02 Whistleblower Identity category:
    • New authority added
    2018-04-02 CUI Registry taxonomy has been changed for simplification and to better meet agency needs:
    • CUI is controlled at the "category-level" only.
    • The term "subcategory" no longer exists within the CUI Registry's taxonomy.
    • Organizational Index Groupings (OIGs) are used to display categories in the Registry by general informational subject. OIGs are not used to control CUI.
    2017-09-25 Subcategory added:
    • Intelligence-Internal Data subcategory added

    Natural and Cultural Resources category added, with subcategories:

    1. Archaeological Resources
    2. Historic Properties
    3. National Park System Resources
    2017-07-07 Subcategory added:
    • Financial-Federal Housing Finance Non-Public Information
    2017-07-07 Subcategory added:
    • Proprietary Business Information-Ocean Common Carrier and Marine Terminal Operator Agreements
    2017-06-20 Export Control-Research authorities updated to reflect substantive changes to 15 CFR 734:
    • Controls from 15 CFR 734.8(c) and 15 CFR 734.11(a) have been incorporated into 15 CFR 734.8(b)
    2017-05-09 Privacy category description updated:
    • Reference OMB M-17-12 (previously OMB M-07-16)


    Subcategory added:
    • Nuclear-Recommendation Material


    Subcategory renamed and description updated:
    • Financial-Central Contractor Registration renamed Proprietary Business Information-System for Award Management
    2017-03-27 Privacy category:
    • Authority OMB M-17-12 rescinded and replaced by OMB M-07-16 on January 3. 2017.

    RSS Feed