Controlled Unclassified Information (CUI)
The CUI Program was established by Executive Order 13556 in 2010 and implemented by 32 CFR 2002 in 2016. The Program will standardize the way the Executive Branch handles information that requires protection and is not classified. Implementation of the program will replace hundreds of different agency policies and associated markings with one shared system of marking and consistent implementation.
One of the key elements of CUI is that protection of any information designated as CUI must be defined in a law, regulation, or Government-wide policy. These authorities can be found within the applicable Categories and Subcategories of the CUI Registry.