DoD 5200.48 alignment with export-control?

• A. Export-control considerations do not apply to CUI.
• B. All CUI must always comply with export-control laws.
• C. DoD 5200.48 disregards export-control considerations.
• D. Some CUI is subject to export-control laws; treat such information under both CUI and export-control requirements.

Answer: (D)

The key idea is that there is overlap between how CUI is protected under the DoD’s CUI program and how export-control laws regulate the release of sensitive information. Not all CUI is export-controlled, but some CUI carries export-control markings or is designated as export-controlled. In those cases, the information must be handled in line with both sets of rules: adhere to CUI safeguarding and dissemination controls, and also satisfy export-control requirements such as licensing, screening for foreign-national access, and restrictions on where or to whom the information can be disclosed. This dual treatment ensures that any information that could pose export risks is protected from improper disclosure while still following CUI-specific handling rules. If the information isn’t export-controlled, export-control laws don’t apply, but CUI rules still govern its protection. That’s why the correct answer recognizes that only a portion of CUI falls under export-control, and those items must be managed under both frameworks.