Earlier this week, AIA’s National Security Policy Division finalized and submitted comments on Federal Acquisition Regulation (FAR) Case 2017-016, Controlled Unclassified Information (CUI). This rule has been in development for almost 10 years, and the hope is that, when finalized, it will help clarify how the government identifies, defines, and delivers CUI to industry.
AIA’s comments focused on revising the CUI definition to resolve ambiguities in the scope of CUI regulations, the application of CUI requirements to commercial products and services, clearly identifying necessary exclusions to the definition of a “CUI Incident,” extending CUI incident notification timelines (including for mismarked or unmarked CUI), and the risks of applying CUI requirements to patent applications.
