What is required for retention of CUI records?

• A. Indefinite retention in any secure location.
• B. Retention according to DoD/NARA schedules, with secure storage until disposition.
• C. No retention requirement beyond active use.
• D. Retention only for FOIA requests.

Answer: (B)

CUI records must be retained in accordance with DoD/NARA retention schedules, and kept in secure storage until the scheduled disposition. DoD/NARA schedules specify how long different types of CUI must be kept and when they should be disposed of. Keeping the records securely until that disposition point protects the information and ensures compliance with policy and law. The retention period is not open-ended or based solely on active use, and it isn’t determined by FOIA requests alone—the schedules govern the duration and the method of disposition, whether by destruction or transfer when the time comes.