Is there a specific timeline to decontrol CUI?

Is there a specific timeline to decontrol CUI?

• A. Yes, within 90 days
• B. No; timelines exist only if required by law/regulation/government-wide policy
• C. Always after 1 year
• D. Dependent on the DoD component's discretion

Answer: (B)

In CUI handling, there isn’t a universal countdown for decontrolling. Timelines only exist if a law, regulation, or government-wide policy specifically requires one. Otherwise, decontrol happens when the information no longer requires safeguarding, and the designated official or the responsible CUI authority determines that the marking can be removed in accordance with applicable laws and policies. So, there isn’t a fixed period like 90 days or a year that applies across the board; any timeline would come from the governing rule or policy, not from the CUI program itself.

In CUI handling, there isn’t a universal countdown for decontrolling. Timelines only exist if a law, regulation, or government-wide policy specifically requires one. Otherwise, decontrol happens when the information no longer requires safeguarding, and the designated official or the responsible CUI authority determines that the marking can be removed in accordance with applicable laws and policies. So, there isn’t a fixed period like 90 days or a year that applies across the board; any timeline would come from the governing rule or policy, not from the CUI program itself.