Skip to main content
Browse requirements
X-CUI-DECONTROL Informational

Decontrol CUI When Safeguarding Is No Longer Required

Official citation: 32 CFR 2002.18

Class: informational · Severity: medium

Requirement text

32 CFR 2002.18

What it means

CUI status is not permanent. 32 CFR 2002.18 lets the designating agency decontrol information when safeguarding is no longer required, and contractors should not keep treating decontrolled data as CUI. Decontrol is an agency decision — contractors follow it rather than make it.

Required by

  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • Ag/Food — 32 CFR Part 2002
  • Legal — 32 CFR Part 2002
  • Chemical — 32 CFR Part 2002
  • Nuclear — 32 CFR Part 2002
  • DIB — 32 CFR Part 2002
  • — 32 CFR Part 2002
  • IT/Cloud — 32 CFR Part 2002
  • Water — 32 CFR Part 2002
  • GovCon — 32 CFR Part 2002

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.