GroundRules
32 CFR 2002.46: CUI and the Privacy Act.
Where this section sits in the code
- Title 32—National Defense
- Subtitle B—Other Regulations Relating to National Defense
- CHAPTER XX—INFORMATION SECURITY OVERSIGHT OFFICE, NATIONAL ARCHIVES AND RECORDS ADMINISTRATION
- PART 2002—CONTROLLED UNCLASSIFIED INFORMATION (CUI)
- Subpart C—CUI Program Management
The fact that records are subject to the Privacy Act of 1974 does not mean that agencies must mark them as CUI. Consult agency policies or guidance to determine which records may be subject to the Privacy Act; consult the CUI Registry to determine which privacy information must be marked as CUI. Information contained in Privacy Act systems of records may also be subject to controls under other CUI categories or subcategories and the agency may need to mark that information as CUI for that reason. In addition, when determining whether the agency must protect certain information under the Privacy Act, or whether the Privacy Act allows the agency to release the information to an individual, the agency must base its decision on the content of the information and the Privacy Act's criteria, regardless of whether an agency designates or marks the information as CUI.
Collected 2026-08-27T02:25:30Z. Source file · JSON