Skip to main content
Browse requirements
X-CUI-DECONTROL Informational

Decontrol CUI When Safeguarding Is No Longer Required

Official citation: 32 CFR 2002.18

Class: informational · Severity: medium

Requirement text

32 CFR 2002.18

What it means

CUI status is not permanent. 32 CFR 2002.18 lets the designating agency decontrol information when safeguarding is no longer required, and contractors should not keep treating decontrolled data as CUI. Decontrol is an agency decision — contractors follow it rather than make it.

Required by

  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • 32 CFR Part 2002
  • Ag/Food32 CFR Part 2002
  • Legal32 CFR Part 2002
  • Chemical32 CFR Part 2002
  • Nuclear32 CFR Part 2002
  • DIB32 CFR Part 2002
  • 32 CFR Part 2002
  • IT/Cloud32 CFR Part 2002
  • Water32 CFR Part 2002
  • GovCon32 CFR Part 2002

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.