CUI Explorer

Statistical Information

Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.

Registry statusNARA & DoD
MarkingSTAT
Organizational index groupStatistical
Updated2026-05-15

This page exposes extracted CUI registry and authority analysis as crawlable text. The interactive explorer remains the operational workspace for filtering, comparison, and voice-agent aligned study.

Registry comparison

Field NARA Registry DoD Registry
Category description Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination. Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
Category marking STAT STAT
Banner marking CUI No corresponding field
Basic or Specified Basic + Specified No corresponding field
Authorities 18 USC 1905, 42 USC 242m(d), 44 USC 3501 note Public Law 107-347, Sec. 512, 28 CFR 22.25, 28 CFR 22.22, 62 FR 35043 Sec. 2(a) 48 CFR 22.22, 48 CFR 22.25, 62 FR 35043 Sec. 2(a)
DoD applicable policies No corresponding field None listed
Required warning statement No corresponding field None listed
Required dissemination control CUI, CUI//SP-STAT None listed
Examples No corresponding field Information which might influence or affect the market value of any product of the soil grown within the United States, Information concerns or relates to the trade secrets, processes, operations, style of work, or apparatus, or to the identity, confidential statistical data, amount or source of any income, profits, losses, or expenditures of any person, firm, partnership, corporation, or association" "bank examination report information, Names of borrowers or the collateral for loans of any member bank of the Federal Reserve System, any bank insured by the Federal Deposit Insurance Corporation, any branch or agency of a foreign bank, Information acquired by a statistical agency or unit for exclusively statistical purposes may be used only for statistical purposes, and shall not be disclosed, or used, in identifiable form" "the list of respondents to a statistical data collection, Any information in an identifiable form permitting the physical or online contacting of a specific individual, Confidential business information consistent with section 552(b)(4) of title 5, United States Code, and other relevant law, Confidential statistical information collected under a confidentiality pledge, solely for statistical purposes, consistent with the Office of Management and Budget’s Federal Statistical Confidentiality Order, and other relevant law
Registry date May 12, 2025 2026-05-15

Authority analysis

Authority title
Registry authority evidence compiled; primary authority text analysis pending
Authorities
Multiple registry authorities
Source currency
NARA last reviewed: May 12, 2025 | DoD detail accessed: 2026-05-15
How the authority operates
NARA registry status: Basic + Specified. Per-authority NARA status values: Basic, Specified. NARA banner marking evidence: CUI, CUI//SP-STAT. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.

Trigger conditions

  • NARA category scope: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.

Covered information

  • Information which might influence or affect the market value of any product of the soil grown within the United States
  • Information concerns or relates to the trade secrets, processes, operations, style of work, or apparatus, or to the identity, confidential statistical data, amount or source of any income, profits, losses, or expenditures of any person, firm, partnership, corporation, or association" "bank examination report information
  • Names of borrowers or the collateral for loans of any member bank of the Federal Reserve System, any bank insured by the Federal Deposit Insurance Corporation, any branch or agency of a foreign bank
  • Information acquired by a statistical agency or unit for exclusively statistical purposes may be used only for statistical purposes, and shall not be disclosed, or used, in identifiable form" "the list of respondents to a statistical data collection
  • Any information in an identifiable form permitting the physical or online contacting of a specific individual
  • Confidential business information consistent with section 552(b)(4) of title 5, United States Code, and other relevant law
  • Confidential statistical information collected under a confidentiality pledge, solely for statistical purposes, consistent with the Office of Management and Budget’s Federal Statistical Confidentiality Order, and other relevant law
  • Registry-described information: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.

Specified controls

Nara basic or specified
Basic + Specified
Nara authority rows
18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905 || 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT || 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
Nara banner markings
CUI, CUI//SP-STAT
Nara sanctions
18 USC 1905 || 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.29

Safeguarding and dissemination controls

NARA Registry
CUI, CUI//SP-STAT
DoD Registry
None listed
Authority analysis
No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
Basic or Specified
Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.

Related authorities

Authority-by-authority detail

18 USC 1905

Listed by: NARA Registry, Related authorities

Designation evidence

  • NARA authority row: 18 USC 1905 | status: Basic | banner: CUI.
  • NARA sanctions field: 18 USC 1905.
  • Related authority evidence: 18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905

Extracted authority meaning

None listed

Operating conditions

  • NARA category scope used with this authority: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • 18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905
  • NARA registry status: Basic + Specified. Per-authority NARA status values: Basic, Specified. NARA banner marking evidence: CUI, CUI//SP-STAT. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
  • NARA category scope: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.

Safeguarding and dissemination controls

  • NARA registry control evidence: status Basic; banner marking CUI.
  • Nara basic or specified: Basic + Specified
  • Nara authority rows: 18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905 || 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT || 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
  • Nara banner markings: CUI, CUI//SP-STAT
  • Nara sanctions: 18 USC 1905 || 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.29
  • No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
  • Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.

42 USC 242m(d)

Listed by: NARA Registry, Related authorities

Designation evidence

  • NARA authority row: 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT.
  • Related authority evidence: 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT

Extracted authority meaning

None listed

Operating conditions

  • NARA category scope used with this authority: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT
  • NARA registry status: Basic + Specified. Per-authority NARA status values: Basic, Specified. NARA banner marking evidence: CUI, CUI//SP-STAT. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
  • NARA category scope: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.

Safeguarding and dissemination controls

  • NARA registry control evidence: status Specified; banner marking CUI//SP-STAT.
  • Nara basic or specified: Basic + Specified
  • Nara authority rows: 18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905 || 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT || 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
  • Nara banner markings: CUI, CUI//SP-STAT
  • Nara sanctions: 18 USC 1905 || 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.29
  • No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
  • Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.

44 USC 3501 note Public Law 107-347, Sec. 512

Listed by: NARA Registry, Related authorities

Designation evidence

  • NARA authority row: 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT.
  • NARA sanctions field: 44 USC 3501 note Public Law 107-347, Sec. 512.
  • Related authority evidence: 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512

Extracted authority meaning

None listed

Operating conditions

  • NARA category scope used with this authority: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512
  • NARA registry status: Basic + Specified. Per-authority NARA status values: Basic, Specified. NARA banner marking evidence: CUI, CUI//SP-STAT. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
  • NARA category scope: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.

Safeguarding and dissemination controls

  • NARA registry control evidence: status Specified; banner marking CUI//SP-STAT.
  • Nara basic or specified: Basic + Specified
  • Nara authority rows: 18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905 || 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT || 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
  • Nara banner markings: CUI, CUI//SP-STAT
  • Nara sanctions: 18 USC 1905 || 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.29
  • No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
  • Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.

28 CFR 22.25

Listed by: NARA Registry, Related authorities

Designation evidence

  • NARA authority row: 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT.
  • NARA sanctions field: 28 CFR 22.29.
  • Related authority evidence: 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29

Extracted authority meaning

None listed

Operating conditions

  • NARA category scope used with this authority: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29
  • NARA registry status: Basic + Specified. Per-authority NARA status values: Basic, Specified. NARA banner marking evidence: CUI, CUI//SP-STAT. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
  • NARA category scope: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.

Safeguarding and dissemination controls

  • NARA registry control evidence: status Specified; banner marking CUI//SP-STAT.
  • Nara basic or specified: Basic + Specified
  • Nara authority rows: 18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905 || 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT || 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
  • Nara banner markings: CUI, CUI//SP-STAT
  • Nara sanctions: 18 USC 1905 || 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.29
  • No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
  • Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.

28 CFR 22.22

Listed by: NARA Registry, Related authorities

Designation evidence

  • NARA authority row: 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT.
  • NARA sanctions field: 28 CFR 22.29.
  • Related authority evidence: 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29

Extracted authority meaning

None listed

Operating conditions

  • NARA category scope used with this authority: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29
  • NARA registry status: Basic + Specified. Per-authority NARA status values: Basic, Specified. NARA banner marking evidence: CUI, CUI//SP-STAT. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
  • NARA category scope: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.

Safeguarding and dissemination controls

  • NARA registry control evidence: status Specified; banner marking CUI//SP-STAT.
  • Nara basic or specified: Basic + Specified
  • Nara authority rows: 18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905 || 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT || 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
  • Nara banner markings: CUI, CUI//SP-STAT
  • Nara sanctions: 18 USC 1905 || 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.29
  • No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
  • Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.

62 FR 35043 Sec. 2(a)

Listed by: NARA Registry, DoD Registry, Related authorities

Designation evidence

  • NARA authority row: 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI.
  • DoD authority row: 62 FR 35043 Sec. 2(a). DoD lists this citation for the category; this DoD detail page does not display a separate Basic/Specified field.
  • Related authority evidence: 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
  • Related authority evidence: DoD lists this authority for the category; the linked authority text is extracted below when available.
  • Registry designation context: Basic + Specified, CUI. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
  • Registry designation for this category is Basic + Specified with banner CUI.

Extracted authority meaning

  • 62 FR 35043 Sec. 2(a) authority text
  • Registry designation context: Basic + Specified, CUI. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.

Operating conditions

  • NARA category scope used with this authority: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • DoD category scope used with this authority: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
  • DoD lists this authority for the category; the linked authority text is extracted below when available.
  • NARA registry status: Basic + Specified. Per-authority NARA status values: Basic, Specified. NARA banner marking evidence: CUI, CUI//SP-STAT. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
  • NARA category scope: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • Extracted authority condition: 35048Federal Register/ Vol. 62, No. 124/ Friday, June 27, 1997/ Notices specifically includes records management and archival functions authorized in chapters 21, 29, and 33 of title 44 conducted under information security and confidentiality restrictions consistent with sections 2 and 3 of this order; ‘‘statistical purpose’’ specifically excludes many other activities or functions for which information is used in identifiable form, such as determining whether a person is eligible for a license, privilege, right, grant, or benefit (including whether such should be revoked) or whether a person’s conduct was or is in accordance with law (including whether a fine, other punishment, monetary damages, or equitable relief should be imposed); (j) ‘‘Use’’ of information means, unless otherwise indicated, use by a statistical agency or unit, by officers or employees of that agency or unit, or by its agents (‘‘agents’’ are persons designated by a statistical agency or unit to perform, either in the capacity of a Federal employee or otherwise, exclusively statistical activities authorized by law under the supervision or control of an officer or employee of that statistical agency or unit, and who have agreed in writing to comply with all provisions of law that affect information acquired by that statistical agency or unit).
  • Extracted authority condition: For the purposes of this order: (a) ‘‘Disclose’’ means, unless otherwise indicated, to release information to anyone outside of a statistical agency or unit other than the respondent who provided, or is the subject of, such information (or the agent of such respondent); (b) ‘‘Executive agency’’ is defined as in 31 U.S.C. 102; (c) ‘‘Identifiable form’’ means any representation of information that permits information concerning a specific respondent to be reasonably inferred by either direct or indirect means; (d) ‘‘Information’’ means information of any kind that is not generally available to the public, and includes data; (e) ‘‘Person’’ means individuals, organized groups of individuals, societies, associations, firms, partnerships, business trusts, legal representatives, companies, joint stock companies, and corporations, and refers to both the singular and the plural; (f) ‘‘Respondent’’ means a person (other than a Federal employee responding to inquiries within the scope of his employment, see 5 CFR 1320.3(c)(4)) who is requested to provide information, or is the subject of that information, or who provides that information; (g) ‘‘Rule’’ means the whole or part of a statement by an Executive agency of general or particular applicability and future effect, and includes regulations, directives, orders, guidance, and policy statements;...
  • Extracted authority condition: Such consistent protection of confidential statistical information will, in turn, reduce the perceived risks of more efficient working relationships among statistical agencies, relationships that can reduce both the cost and reporting burden imposed by statistical programs.
  • Extracted authority condition: Summary of Comments Received on the Proposed Order On January 29, 1996, OMB issued for public comment a proposed statistical order regarding the confidentiality of statistical information (61 FR 2876).
  • Extracted authority condition: An exception occurs if the State agency has agreed that certain State officers or employees will use statistical information as ‘‘agents’’ of a (Federal) statistical agency or unit as defined in the order—in this case the designated officers or employees of the State agency would be accountable for the responsibilities imposed on such agents.

Safeguarding and dissemination controls

  • NARA registry control evidence: status Basic; banner marking CUI.
  • Nara basic or specified: Basic + Specified
  • Nara authority rows: 18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905 || 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT || 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
  • Nara banner markings: CUI, CUI//SP-STAT
  • Nara sanctions: 18 USC 1905 || 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.29
  • No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
  • Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.
  • Extracted authority control: 35048Federal Register/ Vol. 62, No. 124/ Friday, June 27, 1997/ Notices specifically includes records management and archival functions authorized in chapters 21, 29, and 33 of title 44 conducted under information security and confidentiality restrictions consistent with sections 2 and 3 of this order; ‘‘statistical purpose’’ specifically excludes many other activities or functions for which information is used in identifiable form, such as determining whether a person is eligible for a license, privilege, right, grant, or benefit (including whether such should be revoked) or whether a person’s conduct was or is in accordance with law (including whether a fine, other punishment, monetary damages, or equitable relief should be imposed); (j) ‘‘Use’’ of information means, unless otherwise indicated, use by a statistical agency or unit, by officers or employees of that agency or unit, or by its agents (‘‘agents’’ are persons designated by a statistical agency or unit to perform, either in the capacity of a Federal employee or otherwise, exclusively statistical activities authorized by law under the supervision or control of an officer or employee of that statistical agency or unit, and who have agreed in writing to comply with all provisions of law that affect information acquired by that statistical agency or unit).
  • Extracted authority control: This order is intended to supplement, and not to restrict or diminish, any confidentiality protections that otherwise apply to statistical information.
  • Extracted authority control: 2825), the Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.), and Executive Order 10253 (as amended), and in order to improve the compilation, analysis, publication, dissemination, and confidentiality of statistical information, it is hereby ordered as follows: Section 1.
  • Extracted authority control: Background The Federal Statistical Confidentiality Order issued by the Office of Management and Budget (OMB) establishes policies to assure ‘‘fair information practices’’ (as advocated by the Privacy Protection Study Commission and the Commission on Federal Paperwork) for respondents and subjects of statistical inquiries, based on the concept of ‘‘functional separation’’ developed by the Privacy Protection Study Commission.
  • Extracted authority control: Such consistent protection of confidential statistical information will, in turn, reduce the perceived risks of more efficient working relationships among statistical agencies, relationships that can reduce both the cost and reporting burden imposed by statistical programs.
  • Extracted authority control: An exception occurs if the State agency has agreed that certain State officers or employees will use statistical information as ‘‘agents’’ of a (Federal) statistical agency or unit as defined in the order—in this case the designated officers or employees of the State agency would be accountable for the responsibilities imposed on such agents.

Authority excerpts

Most relevant extracted authority passage

35048Federal Register/ Vol. 62, No. 124/ Friday, June 27, 1997/ Notices specifically includes records management and archival functions authorized in chapters 21, 29, and 33 of title 44 conducted under information security and confidentiality restrictions consistent with sections 2 and 3 of this order; ‘‘statistical purpose’’ specifically excludes many other activities or functions for which information is used in identifiable form, such as determining whether a person is eligible for a license, privilege, right, grant, or benefit (including whether such should be revoked) or whether a person’s conduct was or is in accordance with law (including whether a fine, other punishment, monetary damages, or equitable relief should be imposed); (j) ‘‘Use’’ of information means, unless otherwise indicated, use by a statistical agency or unit, by officers or employees of that agency or unit, or by its agents (‘‘agents’’ are persons designated by a statistical agency or unit to perform, either in the capacity of a Federal employee or otherwise, exclusively statistical activities authorized by law under the supervision or control of an officer or employee of that statistical agency or unit, and who have agreed in writing to comply with all provisions of law that affect information acquired by that statistical agency or unit).

Extracted authority passage 2

This order is intended to supplement, and not to restrict or diminish, any confidentiality protections that otherwise apply to statistical information.

Extracted authority passage 3

2825), the Paperwork Reduction Act of 1995 (44 U.S.C. 3501 et seq.), and Executive Order 10253 (as amended), and in order to improve the compilation, analysis, publication, dissemination, and confidentiality of statistical information, it is hereby ordered as follows: Section 1.

Extracted authority passage 4

Background The Federal Statistical Confidentiality Order issued by the Office of Management and Budget (OMB) establishes policies to assure ‘‘fair information practices’’ (as advocated by the Privacy Protection Study Commission and the Commission on Federal Paperwork) for respondents and subjects of statistical inquiries, based on the concept of ‘‘functional separation’’ developed by the Privacy Protection Study Commission.

Extracted authority passage 5

Such consistent protection of confidential statistical information will, in turn, reduce the perceived risks of more efficient working relationships among statistical agencies, relationships that can reduce both the cost and reporting burden imposed by statistical programs.

Extracted authority passage 6

For the purposes of this order: (a) ‘‘Disclose’’ means, unless otherwise indicated, to release information to anyone outside of a statistical agency or unit other than the respondent who provided, or is the subject of, such information (or the agent of such respondent); (b) ‘‘Executive agency’’ is defined as in 31 U.S.C. 102; (c) ‘‘Identifiable form’’ means any representation of information that permits information concerning a specific respondent to be reasonably inferred by either direct or indirect means; (d) ‘‘Information’’ means information of any kind that is not generally available to the public, and includes data; (e) ‘‘Person’’ means individuals, organized groups of individuals, societies, associations, firms, partnerships, business trusts, legal representatives, companies, joint stock companies, and corporations, and refers to both the singular and the plural; (f) ‘‘Respondent’’ means a person (other than a Federal employee responding to inquiries within the scope of his employment, see 5 CFR 1320.3(c)(4)) who is requested to provide information, or is the subject of that information, or who provides that information; (g) ‘‘Rule’’ means the whole or part of a statement by an Executive agency of general or particular applicability and future effect, and includes regulations, directives, orders, guidance, and policy statements;...

48 CFR 22.22

Listed by: DoD Registry, Related authorities

Designation evidence

  • DoD authority row: 48 CFR 22.22. DoD lists this citation for the category; this DoD detail page does not display a separate Basic/Specified field.
  • Related authority evidence: DoD lists this authority for the category; the linked authority text is extracted below when available.
  • Registry designation context: Basic + Specified, CUI. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
  • Registry designation for this category is Basic + Specified with banner CUI.

Extracted authority meaning

  • Department of Justice § 22.23
  • Registry designation context: Basic + Specified, CUI. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.

Operating conditions

  • DoD category scope used with this authority: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • DoD lists this authority for the category; the linked authority text is extracted below when available.
  • NARA registry status: Basic + Specified. Per-authority NARA status values: Basic, Specified. NARA banner marking evidence: CUI, CUI//SP-STAT. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
  • NARA category scope: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • Extracted authority condition: (4) To the extent required by § 22.27 any private persons from whom identi- fiable data are collected or obtained, either orally or by means of written questionnaire, shall be advised that the data will only be used or revealed for research or statistical purposes and that compliance with requests for in- formation is not mandatory.
  • Extracted authority condition: Research or statistical information identifiable to a private person may be used only for research or statistical purposes. § 22.22 Revelation of identifiable data.
  • Extracted authority condition: (a) Except as noted in paragraph (b) of this section, research and statistical information relating to a private per- son may be revealed in identifiable form on a need-to-know basis only to— (1) Officers, employees, and sub- contractors of the recipient of assist- ance; (2) Such individuals as needed to im- plement sections 202(c)(3), 801, and 811(b) of the Act; and sections 223(a)(12)(A), 223(a)(13), 223(a)(14), and 243 of the Juvenile Justice and Delin- quency Prevention Act.

Safeguarding and dissemination controls

  • Nara basic or specified: Basic + Specified
  • Nara authority rows: 18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905 || 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT || 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
  • Nara banner markings: CUI, CUI//SP-STAT
  • Nara sanctions: 18 USC 1905 || 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.29
  • No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
  • Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.
  • Extracted authority control: (8) Project findings and reports pre- pared for dissemination will not con- tain information which can reasonably be expected to be identifiable to a pri- vate person except as authorized under § 22.22.
  • Extracted authority control: (a) Except as noted in paragraph (b) of this section, research and statistical information relating to a private per- son may be revealed in identifiable form on a need-to-know basis only to— (1) Officers, employees, and sub- contractors of the recipient of assist- ance; (2) Such individuals as needed to im- plement sections 202(c)(3), 801, and 811(b) of the Act; and sections 223(a)(12)(A), 223(a)(13), 223(a)(14), and 243 of the Juvenile Justice and Delin- quency Prevention Act.
  • Extracted authority control: (b) The Privacy Certificate shall briefly describe the project and shall contain assurance by the applicant that: (1) Data identifiable to a private per- son will not be used or revealed, except as authorized under §§ 22.21, 22.22.
  • Extracted authority control: (2) Access to data will be limited to those employees having a need there- fore and that such persons shall be ad- vised of and agree in writing to comply with these regulations.
  • Extracted authority control: Informa- tion may only be transferred for such purposes upon a clear demonstration that the standards of § 22.26 have been met and that, except where informa- tion is transferred under paragraphs (a) (1) and (2) of this section, such trans- fers shall be conditioned on compliance with a § 22.24 agreement.
  • Extracted authority control: 461 Department of Justice § 22.23 (c) The regulations do not apply to information gained regarding future criminal conduct. [41 FR 54846, Dec. 15, 1976, as amended at 43 FR 16974, Apr. 21, 1978; 51 FR 6400, 6401, Feb. 24, 1986] § 22.21 Use of identifiable data.

Authority excerpts

Most relevant extracted authority passage

(8) Project findings and reports pre- pared for dissemination will not con- tain information which can reasonably be expected to be identifiable to a pri- vate person except as authorized under § 22.22.

Extracted authority passage 2

(a) Except as noted in paragraph (b) of this section, research and statistical information relating to a private per- son may be revealed in identifiable form on a need-to-know basis only to— (1) Officers, employees, and sub- contractors of the recipient of assist- ance; (2) Such individuals as needed to im- plement sections 202(c)(3), 801, and 811(b) of the Act; and sections 223(a)(12)(A), 223(a)(13), 223(a)(14), and 243 of the Juvenile Justice and Delin- quency Prevention Act.

Extracted authority passage 3

(b) The Privacy Certificate shall briefly describe the project and shall contain assurance by the applicant that: (1) Data identifiable to a private per- son will not be used or revealed, except as authorized under §§ 22.21, 22.22.

Extracted authority passage 4

(2) Access to data will be limited to those employees having a need there- fore and that such persons shall be ad- vised of and agree in writing to comply with these regulations.

Extracted authority passage 5

Informa- tion may only be transferred for such purposes upon a clear demonstration that the standards of § 22.26 have been met and that, except where informa- tion is transferred under paragraphs (a) (1) and (2) of this section, such trans- fers shall be conditioned on compliance with a § 22.24 agreement.

48 CFR 22.25

Listed by: DoD Registry, Related authorities

Designation evidence

  • DoD authority row: 48 CFR 22.25. DoD lists this citation for the category; this DoD detail page does not display a separate Basic/Specified field.
  • Related authority evidence: DoD lists this authority for the category; the linked authority text is extracted below when available.
  • Registry designation context: Basic + Specified, CUI. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.
  • Registry designation for this category is Basic + Specified with banner CUI.

Extracted authority meaning

  • 48 CFR 22.25 authority text
  • Registry designation context: Basic + Specified, CUI. The linked authority text contains category-scope or applicability language that helps determine when the information falls within this CUI category. The linked authority text contains disclosure, access, protection, release, dissemination, or distribution-control language relevant to handling. The linked authority text contains violation, penalty, sanction, or enforcement language that may affect consequences for mishandling.

Operating conditions

  • DoD category scope used with this authority: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • DoD lists this authority for the category; the linked authority text is extracted below when available.
  • NARA registry status: Basic + Specified. Per-authority NARA status values: Basic, Specified. NARA banner marking evidence: CUI, CUI//SP-STAT. The registry evidence is preserved here; detailed primary-law or regulation text analysis remains pending for this category.
  • NARA category scope: Refers to information collected by a Federal statistical agency, unit, or program for statistical purposes or used for statistical activities; under law, regulation, or Government-wide policy such 'Statistical' CUI requires: (1) protection from unauthorized disclosure; (2) special handling safeguards; and/or (3) prescribed limits on access or dissemination.
  • Extracted authority condition: (b) Information identifiable to a pri- vate person will not be revealed to any person for any purpose except where the information has already been in- cluded in research findings (and/or data bases) and is revealed on a need-to- know basis for research or statistical purposes, provided that such transfer is approved by the person providing infor- mation under the agreement, or au- thorized under § 22.24(e).
  • Extracted authority condition: Upon completion of a research or sta- tistical project the security of identifi- able research or statistical information shall be protected by: (a) Complete physical destruction of all copies of the materials or the iden- tifiable portion of such materials after a three-year required recipient reten- tion period or as soon as authorized by law, or (b) Removal of identifiers from data and separate maintenance of a name- code index in a secure location.
  • Extracted authority condition: (h) Information identifiable to a pri- vate person (obtained in accordance with this agreement) will, unless other- wise agreed upon, be returned upon completion of the project for which ob- tained and no copies of that informa- tion retained. [41 FR 5486, Dec. 15, 1976, as amended at 51 FR 6401, Feb. 24, 1986] § 22.25 Final disposition of identifiable materials.

Safeguarding and dissemination controls

  • Nara basic or specified: Basic + Specified
  • Nara authority rows: 18 USC 1905 | status: Basic | banner: CUI | sanctions: 18 USC 1905 || 42 USC 242m(d) | status: Specified | banner: CUI//SP-STAT || 44 USC 3501 note Public Law 107-347, Sec. 512 | status: Specified | banner: CUI//SP-STAT | sanctions: 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.25 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 28 CFR 22.22 | status: Specified | banner: CUI//SP-STAT | sanctions: 28 CFR 22.29 || 62 FR 35043 Sec. 2(a) | status: Basic | banner: CUI
  • Nara banner markings: CUI, CUI//SP-STAT
  • Nara sanctions: 18 USC 1905 || 44 USC 3501 note Public Law 107-347, Sec. 512 || 28 CFR 22.29
  • No DoD required dissemination control is listed on the registry page. Apply approved limited dissemination controls only when required or permitted by the designating agency or governing authority.
  • Use the registry assertions, NARA authority rows, DoD authorities, DoD policies, warning statements, required dissemination controls, and examples first. Where the cited authority does not specify a handling detail, apply CUI Basic safeguards and dissemination rules so long as they do not conflict with the authority or agency-specific controls.
  • Extracted authority control: Upon completion of a research or sta- tistical project the security of identifi- able research or statistical information shall be protected by: (a) Complete physical destruction of all copies of the materials or the iden- tifiable portion of such materials after a three-year required recipient reten- tion period or as soon as authorized by law, or (b) Removal of identifiers from data and separate maintenance of a name- code index in a secure location.
  • Extracted authority control: (b) Information identifiable to a pri- vate person will not be revealed to any person for any purpose except where the information has already been in- cluded in research findings (and/or data bases) and is revealed on a need-to- know basis for research or statistical purposes, provided that such transfer is approved by the person providing infor- mation under the agreement, or au- thorized under § 22.24(e).
  • Extracted authority control: (e) Access to information will be lim- ited to those employees or subcontrac- tors having a need therefore in connec- tion with performance of the activity for which obtained, and that such per- sons shall be advised of, and agree to comply with, these regulations.
  • Extracted authority control: (g) Project findings and reports pre- pared for dissemination will not con- tain information which can reasonably be expected to be identifiable to a pri- vate person.
  • Extracted authority control: (c) Knowingly and willfully using or disseminating information contrary to the provisions of the agreement shall constitute a violation of these regula- tions, punishable in accordance with the Act.

Authority excerpts

Most relevant extracted authority passage

Upon completion of a research or sta- tistical project the security of identifi- able research or statistical information shall be protected by: (a) Complete physical destruction of all copies of the materials or the iden- tifiable portion of such materials after a three-year required recipient reten- tion period or as soon as authorized by law, or (b) Removal of identifiers from data and separate maintenance of a name- code index in a secure location.

Extracted authority passage 2

(b) Information identifiable to a pri- vate person will not be revealed to any person for any purpose except where the information has already been in- cluded in research findings (and/or data bases) and is revealed on a need-to- know basis for research or statistical purposes, provided that such transfer is approved by the person providing infor- mation under the agreement, or au- thorized under § 22.24(e).

Extracted authority passage 3

(e) Access to information will be lim- ited to those employees or subcontrac- tors having a need therefore in connec- tion with performance of the activity for which obtained, and that such per- sons shall be advised of, and agree to comply with, these regulations.

Extracted authority passage 5

(g) Project findings and reports pre- pared for dissemination will not con- tain information which can reasonably be expected to be identifiable to a pri- vate person.

Extracted authority passage 6

(h) Information identifiable to a pri- vate person (obtained in accordance with this agreement) will, unless other- wise agreed upon, be returned upon completion of the project for which ob- tained and no copies of that informa- tion retained. [41 FR 5486, Dec. 15, 1976, as amended at 51 FR 6401, Feb. 24, 1986] § 22.25 Final disposition of identifiable materials.