(a) An Authorized Individual who grants routine access to specific UCNI under § 1017.20 to a person who is not an employee or contractor of the DOE must notify the person receiving the UCNI of protection requirements described in this subpart and any limitations on further dissemination.

(b) A DOE Program Secretarial Officer or NNSA Deputy or Associate Administrator who grants limited access to specific UCNI under § 1017.21 must notify the person receiving the UCNI of protection requirements described in this subpart and any limitations on further dissemination.

An Authorized Individual or a person granted limited access to UCNI under § 1017.21 must maintain physical control over any document or material marked as containing UCNI that is in use to prevent unauthorized access to it.

A document or material marked as containing UCNI must be stored to preclude unauthorized disclosure. When not in use, documents or material containing UCNI must be stored in locked receptacles (e.g., file cabinet, desk drawer), or if in secured areas or facilities, in a manner that would prevent inadvertent access by an unauthorized individual.

A document marked as containing UCNI may be reproduced without the permission of the originator to the minimum extent necessary consistent with the need to carry out official duties, provided the reproduced document is marked and protected in the same manner as the original document.

A document marked as containing UCNI must be destroyed, at a minimum, by using a cross-cut shredder that produces particles no larger than 1/4-inch wide and 2 inches long. Other comparable destruction methods may be used. Material containing or revealing UCNI must be destroyed according to agency directives.

(a) Physically transmitting UCNI documents or material. (1) A document or material marked as containing UCNI may be transmitted by:

(i) U.S. First Class, Express, Certified, or Registered mail;

(ii) Any means approved for transmission of classified documents or material;

(iii) An Authorized Individual or person granted limited access under § 1017.21 as long as physical control of the package is maintained; or,

(iv) Internal mail services.

(2) The document or material must be packaged to conceal the presence of the UCNI from someone who is not authorized access. A single, opaque envelope or wrapping is sufficient for this purpose. The address of the recipient and the sender must be indicated on the outside of the envelope or wrapping along with the words “TO BE OPENED BY ADDRESSEE ONLY.”

(b) Transmitting UCNI documents over telecommunications circuits. Encryption algorithms that comply with all applicable Federal laws, regulations, and standards for the protection of unclassified controlled information must be used when transmitting UCNI over a telecommunications circuit (including the telephone, facsimile, radio, e-mail, Internet).

UCNI may be processed or produced on any AIS that complies with the guidance in OMB Circular No. A-130, Revised, Transmittal No. 4, Appendix III, “Security of Federal Automated Information Resources,” or is certified for classified information.