Controlled Unclassified Information (CUI)

Home > Controlled Unclassified Information (CUI) > CUI Category: Health Information

CUI Category: Health Information

Banner Marking for Specified Authorities: CUI//SP-HLTH

Banner Marking for Basic Authorities: CUI

Category Description: As per 42 USC 1320d(4), "health information" means any information, whether oral or recorded in any form or medium, that (A) is created or received by a health care provider, health plan, public health authority, employer, life insurer, school or university, or health care clearinghouse; and (B) relates to the past, present, or future physical or mental health or condition of an individual, the provision of health care to an individual, or the past, present, or future payment for the provision of health care to an individual.
Category Marking: HLTH
Alternative Banner Marking for Basic Authorities: CUI//HLTH
Banner Format and Marking Notes:
Snippet

Banner Format:

CUI//Category Marking//Limited Dissemination Control

 

Marking Notes:

  • The CUI Control Marking may consist of either the word “CONTROLLED” or the acronym “CUI”, depending on agency policy.
  • Category marking is optional when marking Basic CUI unless required by agency policy. Example: CUI//Limited Dissemination Control.
  • Category Marking preceded by "SP-" is required when marking Specified CUI. Example: CUI//SP-Category Marking//Limited Dissemination Control
  • Whether CUI is Basic or Specified is determined by the applicable Safeguarding and/or Dissemination Authority for a given instance of CUI.
  • Separate multiple Category Markings by a single forward slash (/) and list Category Markings alphabetically. Example: CUI//Category Marking A/Category Marking B//Limited Dissemination Control
  • Category Markings for Specified CUI precede Category Markings for Basic CUI. Example: CUI//SP-Category Marking/Category Marking//Limited Dissemination Control
  • Separate multiple Limited Dissemination Controls by a single forward slash (/). Example: CUI//Category Marking//Limited Dissemination Control/Limited Dissemination Control
  • Reference 32 CFR 2002.20, CUI Marking Handbook, Limited Dissemination Controls and individual agency policy for additional and specific marking guidelines

 

 

Snippet

Notes for Safeguarding, Dissemination and Sanction Authorities:

 

  • Whether CUI is Basic or Specified is determined by the applicable Safeguarding and/or Dissemination Authority for that CUI.
  • Each "Safeguarding and/or Dissemination Authority" citation links to the statute, regulation or government-wide policy authorizing the control of that information as CUI.
  • Each "Sanctions" authority links to the statute, regulation or government-wide policy that includes penalties for CUI misuse of CUI for the associated "Safeguarding and/or Dissemination Authority" on the same line.

Specified

Basic

Safeguarding and/or Dissemination Authority Basic or
Specified		 Banner Marking Sanctions
18 USC 3486(e) Specified CUI//SP-HLTH  
18 USC 4247(e) Basic CUI  
42 USC 242m(d) Specified CUI//SP-HLTH  
38 USC 7332(a) Basic CUI 38 USC 5705
38 USC 5705 Basic CUI 38 USC 5705
42 USC 12112(d) Basic CUI 42 USC 12188
42 USC 1320d-2(d)(2) Specified CUI//SP-HLTH 42 USC 1320d-5
42 USC 1320d-6(b)
42 USC 1320d-2 note(b)(Public Law 104-191, Section 264) Basic CUI 42 USC 1320d-5
42 USC 1320d-6(b)
42 USC 15044(c) Basic CUI  
42 USC 290dd-2(a) Basic CUI 42 USC 290dd-2(f)

5 CFR 293, Subpart E (293.501, 293.504. 293. 505)

 

Basic (provisional)

CUI

  
(see also 5 CFR 293.106 and 5 CFR 297.401 already on Registry

Specified

Basic

under "Personnel Records"

under "General Privacy"

  
20 CFR 401.200(g) Specified CUI//SP-HLTH 20 CFR 401.200(h)
29 CFR 1630.14(b)(1) Specified CUI//SP-HLTH  
42 CFR 2.1(a) Basic CUI 42 CFR 2.1(f)
42 CFR 2.12(a) Basic CUI 42 CFR 2.1(f)
42 CFR 2.13(c) Basic CUI//SP-HLTH 42 CFR 2.1(f)
42 CFR 2.16(a) Specified CUI//SP-HLTH 42 CFR 2.1(f)
42 CFR 2.2(a) Basic CUI 42 CFR 2.2(f)
42 CFR 2.21(b) Basic CUI 42 CFR 2.2(f)
45 CFR 164.306(a) Basic CUI  
45 CFR 164.310(a)(1) Basic CUI  
45 CFR 164.502(a) Basic CUI  
45 CFR 164.508(a) Basic CUI  
45 CFR 164.530(c) Basic CUI 45 CFR 164.530(e)
29 CFR 1630.14(c) Specified CUI//SP-HLTH  
29 CFR 1630.14(d)(4) Specified CUI//SP-HLTH  
29 CFR 1630.16(c)(3) Basic CUI  

 

Snippet

Authority links are updated based on regular re-publication of the United States Code and Code of Federal Regulations, and the CUI Registry maintenance schedule.

 

Top