Policy on Controlled Unclassified Info Languishes
Three and a half years have passed since President Bush called for the establishment of a standardized government-wide format for the handling of “controlled unclassified information” (CUI) that would replace the dozens of different, incompatible controls on what had been known as “Sensitive But Unclassified” (SBU) information. More than a year has passed since President Bush declared that the new CUI framework was established.
But in practice, little has changed because the implementing policies and procedures have not yet been devised. An initial draft for comment is expected sometime this summer. Meanwhile, agencies continue to follow their previous, often problematic approaches.
“Department of Defense components are not to use any of the new CUI markings until the national level interagency policy has been issued, the DoD-level implementation guidance has been published, and the DoD CUI Transition Plan is completed,” wrote Under Secretary of Defense James R. Clapper, Jr. in an internal memorandum (pdf) last month. “Until such time, existing policy guidance pertaining to information such as For Official Use Only (FOUO), SBU, and DoD Unclassified Controlled Nuclear Information… must be strictly adhered to,” Gen. Clapper wrote.
The National Archives has requested $1.9 million for the Controlled Unclassified Information Office in FY 2010. “The office will establish standards and guidance for this type of information, and monitor department and agency compliance.”
Aside from increasing uniformity of controls on information, limits on the authorized use of such controls and other policy provisions remain to be defined.
These ideas aim to advance the detailed policy solutions needed to foster public trust and implement fairness in the adoption of AI across diverse domains, from healthcare and government benefits to rural access, education, and worker protections.
The evidence is clear: algorithmic pay-setting is established in app-based work, and payroll/timekeeping failures show how software can produce systemic wage harm at scale
While a few states have taken steps to implement decision-making mechanisms for certain AI systems, too many leaders are simply accepting narratives about AI’s purported public benefit at face value – jumping to the “how” of AI implementation before thoroughly vetting potential systems and deciding whether they are appropriate to use at all.
When properly structured — with specific numeric targets, secured financial obligations, independent monitoring, and meaningful enforcement — CBAs transform data center deals into durable community partnerships.