{"data":{"id":"us/32-cfr-2002.36","jurisdiction":"us","citation":"32 CFR 2002.36","heading":"Legacy materials.","body":"(a) Agencies must review documents created prior to November 14, 2016 and re-mark any that contain information that qualifies as CUI in accordance with the Order, this part, and the CUI Registry. When agencies do not individually re-mark legacy material that qualifies as CUI, agencies must use an alternate permitted marking method (see § 2002.20(a)(8)).\n(b) When the CUI SAO deems re-marking legacy documents to be excessively burdensome, the CUI SAO may grant a legacy material marking waiver under § 2002.38(b).\n(c) When the agency re-uses any information from legacy documents that qualifies as CUI, whether the documents have obsolete control markings or not, the agency must designate the newly-created document (or other re-use) as CUI and mark it accordingly.","path":["Title 32—National Defense","Subtitle B—Other Regulations Relating to National Defense","CHAPTER XX—INFORMATION SECURITY OVERSIGHT OFFICE, NATIONAL ARCHIVES AND RECORDS ADMINISTRATION","PART 2002—CONTROLLED UNCLASSIFIED INFORMATION (CUI)","Subpart C—CUI Program Management"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-32.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:25:30Z","sha256":"8e5e6bedd1d19ebcbc0a41f53861d34e6896c861f8c870479795cd2f56d25574","source_id":"us-cfr","stale":true,"prev":"us/32-cfr-2002.34","next":"us/32-cfr-2002.38"},"notice":"GroundRules: Original legal text. Not legal advice."}