How does CUI relate to FOIA?

• A. CUI may be restricted from disclosure under FOIA; requests may be partially or fully granted or denied with redactions.
• B. CUI is always protected from FOIA.
• C. FOIA requests for CUI are always granted in full.
• D. CUI is not subject to FOIA.

Answer: (A)

When considering how CUI interacts with FOIA, the key idea is that FOIA requires agencies to disclose records upon request unless the information is protected by exemptions or excluded from disclosure. CUI isn’t automatically off-limits; it can be released, but many CUI portions are safeguarded and may be withheld or redacted to protect safeguarding requirements, privacy, law enforcement interests, national security, or other protected considerations. So, requests for CUI can be granted in full, granted with redactions, or denied in whole or part, depending on the specifics and applicable exemptions.

In practice, an FOIA request for CUI is evaluated against the relevant exemptions and the nature of the CUI itself. If the information can be released without compromising the safeguarding requirements, it will be released; if parts of it are protected, those parts are redacted; if release would cause prohibited harm, the request or portions of it may be denied.

That’s why the best description is that CUI may be restricted from disclosure under FOIA; requests may be partially or fully granted or denied with redactions. The other statements imply absolute protection, universal granting, or total irrelevance to FOIA, which aren’t accurate given how FOIA operates with safeguarding categories like CUI.