The Centers for Disease Control and Prevention (CDC) has updated and revised its policy on “sensitive but unclassified” (SBU) information, the increasingly common twilight category of information that is neither classified nor publicly released.
“Marking information SBU does not automatically qualify it for a public release exemption,” the CDC policy observes. (There is no “SBU exemption” to the Freedom of Information Act.)
On the other hand, “the absence of the SBU or other related marking does not necessarily mean the information should be publicly released.”
“Therefore, all information should be reviewed and approved prior to its public release,” the CDC instructs.
A copy of the revised SBU policy was posted on the CDC intranet and obtained by Secrecy News.
The Government Accountability Office will publish a major report on the use of Sensitive But Unclassified control markings next month.
By preparing credible, bipartisan options now, before the bill becomes law, we can give the Administration a plan that is ready to implement rather than another study that gathers dust.
Even as companies and countries race to adopt AI, the U.S. lacks the capacity to fully characterize the behavior and risks of AI systems and ensure leadership across the AI stack. This gap has direct consequences for Commerce’s core missions.
The last remaining agreement limiting U.S. and Russian nuclear weapons has now expired. For the first time since 1972, there is no treaty-bound cap on strategic nuclear weapons.
As states take up AI regulation, they must prioritize transparency and build technical capacity to ensure effective governance and build public trust.