Classifying the Unclassified - Blanket Secrecy License?

On May 9, this past Friday, the White House issued a memorandum doing away with the old category of "Sensitive But Unclassified" and replacing it with "Controlled Unclassified Information."

The memo is titled, "Memorandum For The Heads Of Executive Departments And Agencies - SUBJECT: Designation and Sharing of Controlled Unclassified Information (CUI)".

Here is how the memo defines CUI (bolding mine):

a. "Controlled Unclassified Information" is a categorical designation that refers to unclassified information that does not meet the standards for National Security Classification under Executive Order 12958, as amended, but is (i) pertinent to the national interests of the United States or to the important interests of entities outside the Federal Government, and (ii) under law or policy requires protection from unauthorized disclosure, special handling safeguards, or prescribed limits on exchange or dissemination. Henceforth, the designation CUI replaces "Sensitive But Unclassified" (SBU).

This is such a broad brush that it could be used to exempt anything from public disclosure. By definition, isn't anything the government produces at least somewhat pertinent to the national interests of the United States? Otherwise, why waste taxpayer dollars and government time creating the product?

Then there's the allowance for "policy." I'm sure that DoD's 2002 domestic propaganda program probably "required protection" from "unauthorized disclosure" for "policy" reasons.

This is a definition that appears to be designed to give the executive branch total control over what information is released by the US Government regardless of existing law. It is an order that should be challenged by Congress today with no funding permitted for its implementation. Assuming the President doesn't back down, it should be one of the first items revoked by the incoming President.

Government information items should be properly classified and protected, safeguarded when containing individuals personal data, or public record. No twilight zone of "It's unclassified, by I can't give it to you for reasons of government policy."

No votes yet

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

by what authority?

My question is: to what degree does the executive branch have authority "to [prescribe] limits on exchange or dissemination" by "policy", regardless of the justification? Checking carefully when a FOIA request is filed should already happen.

What this means is really unclear. Isn't most governmental information controlled, but unclassified? The records schedules set by NARA set dissemination and handling guidelines. What does this memo succeed in that the GRS's from NARA don't?

CUI=Common frame of reference

The author misunderstands and misrepresents the policy. First CUI is NOT a classification category (these are CONFIDENTIAL, SECRET, TOP SECRET & above), but a standardized national term/descriptor and uniform system to replace current disparate marking schemes. It is intended to facilitate sharing and safeguarding information across government by providing a common vocabulary and understanding of authorized distribution and appropriate handling. Second the policy does not create new criteria or protections, but is based on existing policies, laws and regulations. Some CUI examples include information that is: exempt from FOIA (5 USC Sec 552) ; subject to export control (22 USC 2778 and 50 USC 2401, criminal penalty = $1million + 10years); or proprietary subject to contract and nondisclosure restrictions (10 USC 1905; 18 USC 1831-39 + state laws).

Common usage, not legal usage

Dear Klein,

Thank you for taking the time to comment on my writeup of the new policy on CUI. I understand why you took issue with my headline. In the legal, technical sense "classification" has the meaning you describe and CUI is not "classification" in this limited sense.

I was using "Classifying" in the sense that I think most lay people understand it -- the practice of withholding information from the general public for purposes unrelated to people's privacy. It might not be classified, but it is beyond disclosure and beyond accountability. And several administrations, including the current one have sought to penalize people for mishandling data unrelated to privacy that is not classified.

And in this sense, the CUI designation appears to be a new way of perpetuating withholding information while not technically classifying it. This is the sense of many experts include those at the Federation of American Scientists Secrecy News:

But the new policy will do nothing to restore public access to government records that have been improperly withheld.

Development of the CUI policy began with a December 16, 2005 memo from the President directing agencies to “standardize procedures for sensitive but unclassified information.” Despite the passage of two and a half years, however, little progress has been made in defining the terms of the new policy.

It establishes a single CUI framework, with three graduated levels of sensitivity and security. But the definition of what information may qualify as CUI, which includes anything that “under law or policy” requires protection from unauthorized disclosure, is vague and expansive.

To put it another way, the CUI policy does not exclude anything that is currently controlled as Sensitive But Unclassified.

This is a disappointment in light of previous suggestions that wholesale disclosures of currently controlled unclassified information might ensue.

“The great majority of the information which is now controlled can be put in a simple unclassified, uncontrolled category, it seems to me,” said Amb. Thomas McNamara, program manage of the ODNI Information Sharing Environment, in 2006 testimony (pdf) before Congress.

But under the new Bush policy, “the great majority of the information” that Amb. McNamara said should be uncontrolled will remain controlled and unavailable to the public.

Source:
White House Issues Policy on “Controlled Unclassified Info”
http://www.fas.org/blog/secrecy/2008/05/white_house_issues.html

------------------------------------
"And besides all that, what we need is a decentralized, distributed system of depositing electronic files to local libraries willing to host them." -- Daniel Cornwall, tipping his hat to Cato the Elder for the original quote.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Lines and paragraphs break automatically.
  • Easily link to terms in various wikis. For help, see <a href="/interwiki/3">interwiki</a>.
  • Web page addresses and e-mail addresses turn into links automatically.

More information about formatting options

Syndicate content