The proposed FAR CUI rule would create government-wide contract clauses for safeguarding Controlled Unclassified Information, but proposed text should not be treated as final until the FAR Council issues a final rule.
In plain terms. The proposed FAR CUI rule is a rulemaking effort to standardize how federal contracts address Controlled Unclassified Information (CUI). Its purpose is to move CUI safeguarding from scattered agency clauses toward a more uniform FAR-based contract framework.
Who it applies to. If finalized, the rule would affect federal contractors and subcontractors whose contracts involve CUI. The specific scope, clause text, flowdown language, effective date, and transition rules depend on the final rule.
What it would require. The proposed rule would add FAR coverage for identifying, safeguarding, and flowing down CUI requirements in federal contracts. Contractors should treat the proposal as a planning signal, not as final clause text. Current obligations still come from existing contracts, statutes, regulations, agency clauses, and incorporated standards.
Why it matters. A final FAR CUI rule could significantly expand standardized CUI obligations beyond the DoD-focused DFARS/CMMC ecosystem. Contractors should track the rule, inventory where they handle CUI, review subcontract flows, and avoid assuming that DoD-only practices will be enough for all civilian-agency CUI contracts.
Citation. Proposed rulemaking — verify current FAR Council / Federal Register status for final rule text and effective date.