{"data":{"id":"us/32-cfr-2002.22","jurisdiction":"us","citation":"32 CFR 2002.22","heading":"Limitations on applicability of agency CUI policies.","body":"(a) Agency CUI policies do not apply to entities outside that agency unless a law, regulation, or Government-wide policy requires or permits the controls contained in the agency policy to do so, and the CUI Registry lists that law, regulation, or Government-wide policy as a CUI authority.\n(b) Agencies may not include additional requirements or restrictions on handling CUI other than those permitted in the Order, this part, or the CUI Registry when entering into agreements.","path":["Title 32—National Defense","Subtitle B—Other Regulations Relating to National Defense","CHAPTER XX—INFORMATION SECURITY OVERSIGHT OFFICE, NATIONAL ARCHIVES AND RECORDS ADMINISTRATION","PART 2002—CONTROLLED UNCLASSIFIED INFORMATION (CUI)","Subpart B—Key Elements of the CUI Program"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-32.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:25:30Z","sha256":"775de50637c32f8e203f3c71647583f5d7b6662c8148a9311b0abe5fe5ec00be","source_id":"us-cfr","stale":true,"prev":"us/32-cfr-2002.20","next":"us/32-cfr-2002.24"},"notice":"GroundRules: Original legal text. Not legal advice."}