§ 286.18 - Safeguarding FOUO information.

(a) During duty hours. During normal working hours, records determined to be FOUO shall be placed in an out-of-sight location if the work area is accessible to nongovernment personnel.

(b) During nonduty hours. At the close of business, FOUO records shall be stored so as to prevent unauthorized access. Filing such material with other unclassified records in unlocked files or desks, etc., is adequate when normal U.S. Government or Government-contractor internal building security is provided during nonduty hours. When such internal security control is not exercised, locked buildings or rooms normally provide adequate after-hours protection. If such protection is not considered adequate, FOUO material shall be stored in locked receptacles such as file cabinets, desks, or bookcases. FOUO records that are subject to the provisions of the National Security Act of 1959 shall meet the safeguards outlined for that group of records.