Is CUI classified?

Is CUI classified?

No. Controlled Unclassified Information (CUI) is not classified data and it states that within its name (e.g., unclassified).

While CUI is unclassified information, it still requires safeguarding under federal regulations. CUI is distinct from classified information and resides outside the national security classification system.

There are three (3) types of Classified data from the US Government's perspective:

  1. Confidential;
  2. Secret; and
  3. Top Secret.

 There are two (2) types of Unclassified data from the US Government's perspective:

  1. Controlled Unclassified Information (CUI) that includes:
    1. CUI Basic; and
    2. CUI Specified;
  2. Uncontrolled Unclassified Information (UUI) that includes:
    1. General UUI (not publicly released or FCI);
    2. Federal Contract Information (FCI); and
    3. Information that has been cleared for public release.

 The US National Archives maintains the CUI Registry and provides an authoritative list of applicable safeguarding and/or dissemination authorities, which govern that specific type of CUI.