General Privacy PRVCY
A CUI category in the Privacy grouping of NARA's registry, CUI Basic or CUI Specified depending on the authority, marked CUI//SP-PRVCY.
For a defense contractor
Foxx Cyber's note, not NARA's
Marked PRVCY. Personnel records, including data about your own staff that the government provides back to you.
NARA's description
CUI Registry · General PrivacyRefers to personal information, or, in some cases, "personally identifiable information," as defined in OMB M-17-12, or "means of identification" as defined in 18 USC 1028(d)(7).
Markings
- Category marking
- PRVCY
- Banner, Specified authorities
- CUI//SP-PRVCY
- Banner, Basic authorities
- CUI
- Alternative banner, Basic
- CUI//PRVCY
A banner reads CUI for Basic categories and CUI//SP-PRVCY for Specified ones, followed by any limited dissemination control such as NOFORN. How the marking rule works, verbatim from 32 CFR 2002.20.
Authorities
The law, regulation or Government-wide policy that makes this information CUI, and whether it does so as a Basic or a Specified authority.
| Safeguarding or dissemination authority | Basic or Specified | Banner | Sanctions |
|---|---|---|---|
| 5 USC 552a(b) | Basic | CUI | 5 USC 552a(i) |
| 34 USC 20920(b)(2) | Basic | CUI | — |
| 29 CFR 2400.4 | Basic | CUI | — |
| 29 CFR 2705.9 | Basic | CUI | — |
| 12 CFR 792.60 | Basic | CUI | — |
| 12 CFR 792.69(c) | Basic | CUI | — |
| 17 CFR 146.6(a) | Basic | CUI | — |
| 18 CFR 3b.225(a) | Basic | CUI | — |
| 5 CFR 297.401 | Basic | CUI | — |
| OMB M-17-12 | Specified | CUI//SP-PRVCY | — |
| 48 CFR 22.1024 | Basic | CUI | — |
| 20 CFR 401.100 | Basic | CUI | — |
| 20 CFR 401.105(b) | Basic | CUI | — |
| 11 CFR 1.14 | Basic | CUI | — |
| OMB Circular A-130 | Basic | CUI | — |
Source: https://www.archives.gov/cui/registry/category-detail/privacy.