96-30884. National Security Information Regulations  

  • [Federal Register Volume 61, Number 234 (Wednesday, December 4, 1996)]
    [Rules and Regulations]
    [Pages 64286-64289]
    From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
    [FR Doc No: 96-30884]
    
    
    =======================================================================
    -----------------------------------------------------------------------
    
    ARMS CONTROL AND DISARMAMENT AGENCY
    
    22 CFR Part 605
    
    
    National Security Information Regulations
    
    AGENCY: Arms Control and Disarmament Agency.
    
    ACTION: Final rule.
    
    -----------------------------------------------------------------------
    
    SUMMARY: The United States Arms Control and Disarmament Agency (ACDA) 
    is updating, revising, and restating in their entirety its National 
    Security Information regulations. In addition to containing internal 
    policies and procedures, these regulations set forth in Sec. 605.8 what 
    members of the public must do to request mandatory declassification 
    review and to appeal denials of requests for declassification.
    
    EFFECTIVE DATE: December 4, 1996.
    
    FOR FURTHER INFORMATION CONTACT: Frederick Smith, Jr., United States 
    Arms Control and Disarmament Agency, Room 5635, 320 21st Street, NW., 
    Washington, DC 20451, telephone (202) 647-3596.
    
    SUPPLEMENTARY INFORMATION: On October 10, 1996, ACDA published a notice 
    of proposed rulemaking (61 FR 53158-53161) with a 36-day comment 
    period. No comments were received during the comment period. 
    Accordingly, the rule is adopted as proposed.
    
    List of Subjects in 22 CFR Part 605
    
        Administrative practice and procedure, Classified information, 
    Freedom of information.
    
        Chapter VI of Title 22 of the Code of Federal Regulations is 
    amended by revising part 605 to read as follows:
    
    PART 605--NATIONAL SECURITY INFORMATION REGULATIONS
    
    Sec.
    605.1  Basis.
    605.2  Objective.
    605.3  Senior agency official.
    605.4  Original classification.
    605.5  Classification authority.
    605.6  Derivative classification.
    605.7  Declassification and downgrading.
    605.8  Mandatory declassification review.
    605.9  Systematic declassification review.
    605.10 Safeguarding.
    
        Authority: E.O. 12958 (60 FR 19825, April 20, 1995); Information 
    Security Oversight Office Directive No. 1, 32 CFR 2001.
    
    
    Sec. 605.1  Basis.
    
        These regulations, taken together with the Information Security 
    Oversight Office Directive No. 1 dated October 13, 1995, provide the 
    basis for the security classification program of the U.S. Arms Control 
    and Disarmament Agency (ACDA) implementing Executive Order 12958, 
    ``Classified National Security Information'' (the Executive Order).
    
    
    Sec. 605.2  Objective.
    
        The objective of the ACDA classification program is to ensure that 
    national security information is protected from unauthorized 
    disclosure, but only to the extent and for such a period as is 
    necessary.
    
    
    Sec. 605.3  Senior agency official.
    
        The Executive Order requires that each agency that originates or 
    handles classified information designate a senior agency official to 
    direct and administer its information security program. The ACDA senior 
    agency official is the Deputy Director. The Deputy Director is assisted 
    in carrying out the provisions of the Executive Order and the ACDA 
    information security program by the Director of Security and by the 
    Classification Adviser.
    
    
    Sec. 605.4  Original classification.
    
        (a) Definition. Original classification is the initial 
    determination that certain information requires protection against 
    unauthorized disclosure in the interest of national security (i.e., 
    national defense or foreign relations of the United States), together 
    with a designation of the level of classification.
        (b) Classification designations--(1) Top Secret shall be applied 
    only to information, the unauthorized disclosure of which reasonably 
    could be expected to cause exceptionally grave damage to the national 
    security. Examples of ``exceptionally grave damage'' include, but are 
    not limited to, armed hostilities against the United States or its 
    allies; the compromise of vital national defense plans or cryptologic 
    and communications intelligence systems; the revelation of sensitive 
    intelligence operations; and the disclosure of scientific or 
    technological developments vital to national security.
        (2) Secret shall be applied to information, the unauthorized 
    disclosure of which reasonably could be
    
    [[Page 64287]]
    
    expected to cause serious damage to the national security. Examples of 
    ``serious damage'' include, but are not limited to, disruption of 
    foreign relations significantly affecting the national security; 
    significant impairment of a program or policy directly related to the 
    national security; revelation of significant military plans or 
    intelligence operations; and compromise of significant scientific or 
    technological developments relating to national security.
        (3) Confidential shall be applied to information, the unauthorized 
    disclosure of which reasonably could be expected to cause damage to the 
    national security.
        (c) Classification restraints. (1) The classification level of any 
    form of information is premised on an evaluation of its contents as a 
    whole, as well as on its relationship to other information.
        (2) In classifying information, the public's interest in access to 
    government information must be balanced against the need to protect 
    national security information.
        (3) In case of doubt, the lower level of classification is to be 
    used.
        (d) Duration of classification. (1) Information shall be classified 
    for as long as is required by national security considerations, subject 
    to the limitations set forth in section 1.6 of the Executive Order. 
    When it can be determined, a specific date or event for 
    declassification shall be set by the original classification authority 
    at the time the information is originally classified. If a specific 
    date or event for declassification cannot be determined, information 
    shall be marked for declassification 10 years from the date of the 
    original decision, except that the original classification authority 
    may classify for a period greater than 10 years specific information 
    that falls within the criteria set forth in section 1.6(d) of the 
    Executive Order.
        (2) An original classification authority may extend the duration of 
    classification or reclassify specific information for successive 
    periods not to exceed 10 years at a time except for records that are 
    more than 25 years old.
        (3) Information classified for an indefinite duration under 
    predecessor orders, such as ``Originating Agency's Determination 
    Required,'' shall be subject to the declassification provisions of Part 
    3 of the Executive Order, including the provisions of section 3.4 
    regarding automatic declassification of records older than 25 years.
    
    
    Sec. 605.5  Classification authority.
    
        (a) General. Classification shall be solely on the basis of 
    national security considerations. In no case shall information be 
    classified in order to conceal violations of law, inefficiency, or 
    administrative error, or to prevent embarrassment to a person, 
    organization, or agency.
        (b) Designations. The following ACDA officials shall have original 
    classification authority in each of the three designations under which 
    they are shown below. This authority vests only in the officials or 
    positions designated and, except as provided in paragraph (c) of this 
    section, may not be redelegated. In the absence of any of the 
    authorized classifiers (for TDY outside Washington, annual leave, 
    temporary position vacancy, etc.), the officer acting in that person's 
    position may exercise the classifier's authority.
        (1) Top Secret. (i) Director,
        (ii) Deputy Director.
        (2) Secret. (i) Officials having Top Secret classification 
    authority,
        (ii) such other officials who have a frequent need to exercise 
    Secret authority and are specifically delegated this authority in 
    writing by the Director.
        (3) Confidential. (i) Officials having Top Secret and Secret 
    classification authority,
        (ii) Other officials who have a frequent need to exercise 
    Confidential authority and are specifically delegated this authority in 
    writing by the Director.
        (c) Delegation of classification authority. (1) The Executive Order 
    restricts delegation of original classification authority to officials 
    who have a demonstrable and continuing need to exercise such authority. 
    Such delegations shall be held to a minimum.
        (2) If in the judgment of bureau or office heads an officer has a 
    demonstrable need for classification authority, a written request over 
    the bureau or office head's signature should be forwarded via the 
    Director of Security to the Deputy Director for action. The request 
    should set forth the officer's name and title, the justification for 
    having the authority, and the level of classification authority sought.
        (3) The Director of Security shall maintain a complete current list 
    by classification designation of individuals to whom and positions to 
    which original classification authority has been delegated.
        (4) Periodic reviews of delegations of classification authority 
    will be made by the Director of Security to ensure that officials so 
    designated have a continuing need to exercise such authority. 
    Recommendations by the Director of Security for discontinuance of 
    delegations will be forwarded to the Deputy Director for action.
        (5) Original classification authority shall not be delegated to 
    persons who only reproduce, extract, or summarize classified 
    information, or who only apply classifications markings derived from 
    source material or as directed by a classification guide.
        (d) Classification responsibilities. Each ACDA officer who signs, 
    authenticates, or otherwise produces a document is responsible for 
    determining that it is properly classified and marked. This 
    responsibility includes determining whether the document contains any 
    originally classified material (in which case the classification must 
    be authorized by an appropriate ACDA classifying official) or contains 
    information already classified (in which case the proper derivative 
    markings must be applied). Any significant doubt about the level of 
    classification shall be resolved in favor of the lower level.
        (e) Classification challenges. Holders of information who believe 
    that its classification status is improper are expected and encouraged 
    to challenge the need for classification, the classification level, the 
    duration of classification, the lack of classification or other aspect 
    believed to be improper. Classification challenges shall be directed to 
    and decided by the Deputy Director. If the information was not 
    originated within or classified by ACDA, it will be referred to the 
    Classification Adviser for coordination with the responsible agency or 
    department if declassification, downgrading, classification or other 
    change in its status appears to be warranted. Individuals making 
    challenges to the classification status of information shall not be 
    subject to retribution for such action, and they shall be advised of 
    their right to appeal the Deputy Director's decision on the challenge 
    to the Interagency Security Classification Appeals Panel established by 
    section 5.4 of the Executive Order.
        (f) Contractor classification authority. (1) Each ACDA contract 
    calling for classified work shall be processed under the National 
    Industrial Security Program.
        (2) Each contract processed under the National Industrial Security 
    Program requires the preparation of a contract security classification 
    specification (DD 254) which serves as the contractor's guidance and 
    authority to apply classification markings.
        (3) Each contract processed under the Department of Energy (DOE) 
    Security Requirements (i.e., involving restricted data or formerly 
    restricted data) shall
    
    [[Page 64288]]
    
    include a provision for naming a classification coordinator in the 
    contractor organization. This individual shall coordinate the derived 
    classification of all documents prepared under the contract in 
    accordance with guidance received from ACDA via the ACDA Contracting 
    Officer's Technical Representative for the contract, or by direct 
    consultation on classification problems with the ACDA Classification 
    Adviser or the Director of Security.
        (4) Only designated officials of the U.S. Government may originally 
    classify information. Contractor personnel, as potential developers of 
    classified information, must follow the guidelines outlined in 
    paragraph (d) of this section entitled ``Classification 
    Responsibilities.'' When there is a question involving the original 
    classification of information, the contractor is obligated to safeguard 
    it in accordance with the classification designation deemed appropriate 
    and submit recommendations to ACDA for classification determination.
        (5) In general, the classification of the information provided by 
    ACDA for use or reference in the completion of the contract will be the 
    source of the classification of documents prepared under the contract.
    
    
    Sec. 605.6  Derivative classification.
    
        (a) Definition. Derivative classification is the incorporating, 
    paraphrasing, restating or generating in new form information that is 
    already classified and the marking of the new material consistent with 
    the classification of the source material. Duplication or reproduction 
    of existing classified information is not derivative classification.
        (b) Responsibility. Derivative application of classification 
    markings is the responsibility of those who prepare material using 
    information that is already classified and of those who apply markings 
    in accordance with instructions from an authorized classifier or in 
    accordance with an authorized classification guide.
        (c) Classification guides. (1) Classification guides used to direct 
    derivative classification and issued by ACDA shall specifically 
    identify the information to be protected, using categorization to the 
    extent necessary to ensure that the information involved can be 
    identified readily and uniformly.
        (2) Each classification guide issued by ACDA shall be approved by 
    the Senior Agency Official.
        (3) Each classification guide issued by ACDA shall be kept current 
    and shall be reviewed as required by directives issued under the 
    Executive Order. The Director of Security shall maintain a list of all 
    classification guides.
    
    
    Sec. 605.7  Declassification and downgrading.
    
        (a) Declassification processes. Declassification of classified 
    information may occur:
        (1) after review of material in response to a Freedom of 
    Information Act (FOIA), mandatory declassification review, discovery, 
    subpoena, or other information access or declassification request;
        (2) after review as part of ACDA's systematic declassification 
    review program;
        (3) as a result of the elapse of the time or the occurrence of the 
    event specified at the time of classification;
        (4) by operation of the automatic declassification provisions of 
    section 3.4 of the Executive Order with respect to material more than 
    25 years old.
        (b) Downgrading. When material classified at the Top Secret level 
    is reviewed for declassification and it is determined that 
    classification continues to be warranted, a determination shall be made 
    whether downgrading to a lower level of classification is appropriate. 
    If downgrading is determined to be warranted, the classification level 
    of the material shall be changed to the appropriate lower level.
        (c) Authority to downgrade and declassify. (1) Classified 
    information may be downgraded or declassified by the official who 
    originally classified the information if that official is still serving 
    in the same position, by a successor in that capacity, by a supervisory 
    official of either, by the Classification Adviser, or by any other 
    official specifically designated by the Deputy Director. Contractor 
    personnel do not have authority to downgrade or declassify.
        (2) The Director of Security shall maintain a record of ACDA 
    officials specifically designated by the Deputy Director as 
    declassification authorities.
        (d) Declassification after balancing public interest. It is 
    presumed that information that continues to meet classification 
    requirements requires continued protection. In exceptional cases, 
    however, the need to protect such information may be outweighed by the 
    public interest in disclosure of the information, and in these cases 
    the information should be declassified. When such questions arise, they 
    shall be referred to the ACDA official with Top Secret authority having 
    primary jurisdiction over the information in question. That official, 
    after consultation with the Public Affairs Adviser and the 
    Classification Adviser, will determine whether the public interest in 
    disclosure outweighs the damage to national security that reasonably 
    could be expected from disclosure. If the determination is made that 
    the information should be declassified and disclosed, that official 
    will make such a recommendation to the Director or the Deputy Director 
    who shall make the decision on declassification and disclosure.
        (e) Public dissemination of declassified information. 
    Declassification of information is not authorization for its public 
    disclosure. Previously classified information that is declassified may 
    be subject to withholding from public disclosure under the FOIA, the 
    Privacy Act, and various statutory confidentiality provisions.
    
    
    Sec. 605.8  Mandatory declassification review.
    
        (a) Action on requests. (1) All requests to ACDA by a member of the 
    public, a government employee, or an agency to declassify and release 
    information shall result in a prompt declassification review of the 
    information, provided the request describes the document or material 
    containing the information with sufficient specificity to enable ACDA 
    to locate it with a reasonable amount of effort.
        (2) If a request does not reasonably describe the information 
    sought, the Classification Adviser will notify the requester that 
    unless additional information is provided or the scope of the request 
    is narrowed, no further action will be taken.
        (3) Mandatory declassification review requests should be directed 
    to the Classification Adviser, U.S. Arms Control and Disarmament 
    Agency, 320 21st St., NW., Washington, DC 20451.
        (4) If the request requires the rendering of services for which 
    reasonable fees should be charged pursuant to the FOIA and ACDA 
    regulations thereunder (22 CFR part 602), such fees shall be imposed at 
    the FOIA schedule rates and the requester shall be so notified.
        (5) The Classification Adviser, in consultation with appropriate 
    ACDA bureaus and offices, will determine whether, under the Executive 
    Order, the requested information may be declassified, in whole or in 
    part, and will promptly make any declassified information available to 
    the requester, unless the information is exempt from disclosure under 
    some other provision of law.
        (b) Appeals from denials. (1) If it is determined that 
    declassification of the information requested is not warranted, in 
    whole or in part, the requester shall be given a brief statement as to 
    the
    
    [[Page 64289]]
    
    reasons for the decision, a notice of the right to appeal to the Deputy 
    Director, and a notice that any such appeal must be filed with ACDA 
    within 60 days. Appeals shall be addressed to: Deputy Director, U.S. 
    Arms Control and Disarmament Agency, 320 21st St., NW., Washington, DC 
    20451.
        (2) The Deputy Director shall act within 30 days of receipt on all 
    appeals of denials of requests for declassification. The Deputy 
    Director shall determine whether continued classification is required 
    in whole or in part. If the Deputy Director determines that continued 
    classification is required under the Executive Order, the requester 
    shall be so notified and informed of the reasons therefor. The 
    requester shall also be advised of the right to appeal any denial to 
    the Interagency Security Classification Appeals Panel in accordance 
    with section 5.4 of the Executive Order.
        (c) Information classified by another agency. When ACDA receives a 
    request for information in its custody that was classified by another 
    agency, the Classification Adviser shall forward the request together 
    with a copy of the document containing the information requested to the 
    classifying agency for review and direct response to the requester. 
    Unless the agency that classified the information objects on the ground 
    that its association with the information requires protection, the 
    Classification Adviser shall also notify the requester of the referral.
        (d) Confirmation of existence or nonexistence of document. In 
    responding to a request for mandatory declassification review, the 
    Classification Adviser may refuse to confirm or deny the existence or 
    nonexistence of a document if the fact of its existence or nonexistence 
    would itself be classifiable under the Executive Order.
    
    
    Sec. 605.9  Systematic declassification review.
    
        The Classification Adviser shall be responsible for conducting a 
    program for systematic declassification review of historically valuable 
    records that were exempted from the automatic declassification 
    provisions of section 3.4 of the Executive Order. The FOIA officer 
    shall prioritize such review on the basis of the recommendations of the 
    Information Security Policy Advisory Council established under section 
    5.5 of the Executive Order and on the degree of researcher interest and 
    likelihood of declassification upon review.
    
    
    Sec. 605.10  Safeguarding.
    
        Specific controls on the use, processing, storage, reproduction and 
    transmittal of classified information within ACDA that provide adequate 
    protection and prevent access by unauthorized persons are contained in 
    Part 1 of the ACDA Security Classification Handbook, an internal 
    guidance manual, and shall be followed by ACDA personnel and, when 
    appropriate, by contractors.
    
        Dated: November 22, 1996.
    Mary Elizabeth Hoinkes,
    General Counsel.
    [FR Doc. 96-30884 Filed 12-3-96; 8:45 am]
    BILLING CODE 6820-32-P
    
    
    

Document Information

Effective Date:
12/4/1996
Published:
12/04/1996
Department:
Arms Control and Disarmament Agency
Entry Type:
Rule
Action:
Final rule.
Document Number:
96-30884
Dates:
December 4, 1996.
Pages:
64286-64289 (4 pages)
PDF File:
96-30884.pdf
CFR: (11)
22 CFR 5.5
22 CFR 605.1
22 CFR 605.2
22 CFR 605.3
22 CFR 605.4
More ...