Say hello to CUI and get ready to say goodbye to SUNSI. The commissioners of the Nuclear Regulatory Commission (NRC) have directed the staff to proceed with a rulemaking to implement the governmentwide Controlled Unclassified Information (CUI) program. One impact of this rulemaking will be to eliminate one of our favorite acronyms: Sensitive Unclassified Non-Safeguards Information (SUNSI). But we are still at least a year away from an official change because the staff doesn’t plan to issue a final rule until 2021.
By way of background, the US National Archives and Records Administration (NARA) published the governmentwide CUI rule on September 14, 2016 (81 Fed. Reg. 63,324), seeking to standardize the current patchwork of more than 100 agency-specific policies for handling sensitive unclassified information requiring safeguarding or dissemination controls. That rule (32 CFR Part 2002) establishes specific handling, incident management, inspection, and oversight requirements for covered information. The NRC CUI program will eventually replace the agency’s current SUNSI program, and will retain safeguards information (SGI).