Executive Order 13526 provides the only basis for classifying information within the Department of Commerce (Department), except as provided in the Atomic Energy Act of 1954, as amended. The Department's policy is to make information concerning its activities available to the public, consistent with the need to protect the national defense and foreign relations of the United States. Accordingly, security classification shall be applied only to protect the national security.

The Director for Security is responsible for implementing and ensuring compliance with E.O. 13526 and this part.

Information may be classified as national security information by a designated original classifier of the Department if it is determined the information concerns one or more of the categories described in section 1.4 of E.O. 13526. The levels established in section 1.2 of E.O. 13526 (Top Secret, Secret, and Confidential) are the only terms that may be applied to national security information. Except as provided by statute, no other terms shall be used within the Department for the three classification levels.

(a) Authority to originally classify information as Secret or Confidential may be exercised only by the Secretary of Commerce and by officials to whom such authority is specifically delegated. No official of the Department is authorized to originally classify information as Top Secret.

(b) In accordance with section 1.3(c)(1) of E.O. 13526, delegations of original classification authority shall be limited to the minimum required to administer E.O. 13526. The Secretary of Commerce shall ensure that designated subordinate officials have a demonstrable and continuing need to exercise delegated original classification authority.

(c) In accordance with section 1.3(c)(4) of E.O. 13526, each delegation of original classification authority shall be in writing and the authority shall not be redelegated except as provided in E.O. 13526.

(d) In accordance with section 1.3(c)(4) of E.O. 13526, each delegation shall identify the official by name or position.

(e) In accordance with section 1.3(c)(5) of E.O. 13526, delegations of original classification authority shall be reported or made available by name or position to the Director of the Information Security Oversight Office in the National Archives and Records Administration.

(f) In accordance with section 1.3(d) of E.O. 13526, all original classification authorities and their designates shall receive training in proper classification (including the avoidance of over-classification) and declassification as provided in E.O. 13526 and its implementing directives at least once a calendar year.

(a) Information shall remain classified no longer than ten years from the date of its original classification, unless, in accordance with section 1.5(b) of E.O. 13526, the original classification authority otherwise determines that the sensitivity of the information requires that it be marked for declassification for up to 25 years from the date of the original decision.

(b) For Department of Commerce originally classified information marked for an indefinite duration which contains incomplete declassification instructions, or lacks them entirely:

(1) The information shall be declassified in accordance with E.O. 13526 as soon as it no longer meets the standards for classification under E.O. 13526, or

(2) if the standards for classification under E.O. 13526 are met, the information shall be declassified after 10 years from the date of the original classification, unless the original classification authority determines that the sensitivity of the information requires that it remain classified for up to 25 years from the date of the original classification, as provided in section 1.5.(b) of E.O. 13526.

National security information over which the Department exercises final classification jurisdiction shall be declassified or downgraded as soon as national security considerations permit. If information is declassified, it may continue to be exempt from public disclosure by the Freedom of Information Act (5 U.S.C. 552) or other applicable law.

(a) Requests. Classified information under the jurisdiction of the Department is subject to review for declassification in accordance with 32 CFR 2001.33, upon receipt of a written request that describes the information with sufficient specificity to locate it with a reasonable amount of effort. Requests must be submitted to the Director for Security, U.S. Department of Commerce, 1401 Constitution Avenue NW, Washington, DC 20230.

(b) Exemptions. The following are exempt from mandatory review for declassification:

(1) Information that has been reviewed for declassification within the past two years;

(2) Information that is the subject of pending litigation;

(3) Information originated by the incumbent President, the incumbent President's White House Staff, committees, commissions, or boards appointed by the incumbent President, or other entities within the Executive Office of the President that solely advise and assist the incumbent President; and

(4) Information specifically exempt from such review by law.

(c) Processing requirements. (1) For requests for review of classified information not received from the National Archives and Records Administration, the Director for Security, or their designate, shall acknowledge receipt of the request directly to the requester. If a request does not adequately describe the information sought in accordance with paragraph (a) of this section, the requester shall be notified that unless additional information is provided, no further action will be taken. The request shall be forwarded to the component that originated the information or that has primary interest in the subject matter. The component assigned action shall review the information in accordance with § 4a.7(c)(2) through (4) within twenty working days.

(2) The component assigned action shall determine whether, under the declassification provisions of the U.S. Department of Commerce's Manual of Security, the entire document or portions thereof may be declassified. Declassification of the information shall be accomplished by a designated declassification authority. Upon declassification, the information shall be remarked. If the information is not partially or entirely declassified, the reviewing official shall provide the reasons for denial by citing the applicable provisions of E.O. 13526. If the classification is a derivative decision based on classified source material of another Federal agency, the component shall provide the information to the originator for review.

(3) If information is declassified, the component shall also determine whether it is releasable under the Freedom of Information Act (FOIA) as amended (5 U.S.C. 552). If the information is not releasable, the component shall advise the Director for Security that the information has been declassified but that it is exempt from disclosure, citing the appropriate exemption of the FOIA as amended.

(4) If the request for declassification is denied in whole or in part, the requester shall be notified of the right to appeal the determination within sixty calendar days and of the procedures for such an appeal. If declassified information remains exempt from disclosure under the FOIA as amended, the requester shall be advised of the appellate procedures under that law.

(d) Fees. If the request requires services for which fees are chargeable, the component assigned action shall calculate the anticipated fees to be charged, and may be required to ascertain the requester's willingness to pay the allowable charges as a precondition to taking further action on the request, in accordance with Department of Commerce rules promulgated under 5 U.S.C. 552(a)(4)(A) of the Freedom of Information Act as amended and Department of Commerce rules promulgated under 5 U.S.C. 552a(f)(5) of the Privacy Act of 1974 (5 U.S.C. 552a).

(e) Right of appeal. (1) A requester may appeal to the Director for Security when information requested under this section is not completely declassified and released after expiration of the applicable time limits. Within thirty working days (i.e., excluding Saturdays, Sundays, and legal public holidays) of receipt of a written appeal:

(i) The Director for Security shall determine whether continued classification of the requested information is required in whole or in part;

(ii) If information is declassified, determine whether it is releasable under the Freedom of Information Act as amended; and

(iii) Notify the requester of his or her determination, making available any information determined to be releasable. If continued classification is required under the provisions of the Department of Commerce Manual for Security, the Director for Security shall notify the requester of his or her determination, including the reasons for denial based on applicable provisions of E.O. 13526, and of the right of final appeal to the Interagency Security Classification Appeals Panel.

(2) During the declassification review of information under appeal the Director for Security may overrule previous determinations in whole or in part if continued protection in the interest of national security is no longer required. If the Director for Security determines that the information no longer requires classification, it shall be declassified and, unless it is otherwise exempt from disclosure under the Freedom of Information Act as amended, released to the requester. The Director for Security shall advise the original reviewing component of his or her decision.

(a) Industrial, Educational, and Commercial Entities. Certain bidders, contractors, grantees, educational, scientific, or industrial organizations may receive classified information under the procedures prescribed by the National Industrial Security Program Operating Manual.

(b) Access by historical researchers and former Presidential appointees. An individual engaged in historical research projects or who has previously occupied a policy-making position to which he or she was appointed by the President may be authorized access to classified information for a limited period, provided that the head of the component with jurisdiction over the information:

(1) Determines in writing that:

(i) Access is consistent with national security;

(ii) The individual has a compelling need for access; and

(iii) The Department's best interest is served by providing access;

(2) Obtains in writing from the individual:

(i) Consent to a review by the Department of any resultant notes and manuscripts for the purpose of determining that no classified information is contained in them; and

(ii) Agreement to safeguard classified information in accordance with applicable requirements; and

(iii) A detailed description of the individual's research;

(3) Ensures that custody of classified information is maintained at a Department facility;

(4) Limits access granted to former Presidential appointees to items that the individual originated, reviewed, signed, or received while serving as a Presidential appointee; and

(5) Receives from the Director for Security:

(i) A determination that the individual is trustworthy; and

(ii) Approval to grant access to the individual.

(c) An individual seeking access should describe the information with sufficient specificity to locate and compile it with a reasonable amount of effort. If the access requested by a historical researcher or former Presidential appointee requires services for which fees are chargeable, the responsible component shall notify the individual in advance.

(d) This section applies only to classified information originated by the Department, or to information in the sole custody of the Department. Otherwise, the individual shall be referred to the classifying agency.