(a) In general. Business information obtained by the Central Intelligence Agency from a submitter shall not be disclosed pursuant to a Freedom of Information Act request except in accordance with this section. For purposes of this section, the following definitions apply:

(1) Business information means confidential commercial or financial information obtained by the United States Government from a submitter that is reasonably believed to contain information exempt from disclosure under 5 U.S.C. 552(b)(4).

(2) Submitter means any person or entity who provides confidential commercial information to the United States Government; it includes, but is not limited to, corporations, businesses (however organized), state governments, and foreign governments. This term does not include any other Federal Government entity.

(b) Designation of confidential commercial or financial information. A submitter of business information will use good-faith efforts to designate, by appropriate markings, either at the time of submission or at a reasonable time thereafter, any portions of its submission that it considers to be confidential commercial or financial information and hence protected from required disclosure pursuant to 5 U.S.C. 552(b)(4). Such designations shall expire ten (10) years after the date of the submission unless the submitter requests, and provides justification for, a longer designation period.

(c) Process in event of FOIA request—(1) Notice to submitters. The Agency shall provide a submitter with prompt written notice of receipt of a Freedom of Information Act request encompassing business information if, after reviewing the request, the responsive records, and, if applicable, any appeal by the requester, the Agency determines that it may be required to release the records, provided:

(i) The submitter has in good faith designated the information as confidential commercial or financial information; or

(ii) The Agency believes the information may be exempt from disclosure pursuant to 5 U.S.C. 552(b), but is unable to make that determination without additional information; and

(iii) The information was submitted within the last ten (10) years unless the submitter requested and provided acceptable justification for a specific notice period of greater duration.

(2) Form of notice. This notice shall either describe the exact nature of the confidential commercial or financial information at issue or provide copies of the responsive records containing such information.

(3) Response by submitter. (i) The Agency shall specify a reasonable time period within which the submitter must respond to the notice described in paragraphs (c)(1) and (2) of this section with a detailed statement identifying any claims of confidentiality, supported by a detailed statement of any objection to disclosure. Such statement shall:

(A) Specify that the information has not been disclosed to the public;

(B) Explain why the information is contended to be a trade secret or confidential commercial information;

(C) Explain how the information is capable of competitive damage if disclosed;

(D) State that the submitter will provide the Agency and the Department of Justice with such litigation defense as requested; and

(E) Be certified by an officer authorized to legally bind the corporation or similar entity.

(ii) It should be noted that information provided by a submitter pursuant to this provision may itself be subject to disclosure under the FOIA.

(iii) A submitter who fails to respond within the time period specified in the notice shall be considered to have no objections to disclosure of the business information identified therein.

(4) Decision and notice of intent to disclose. (i) The Agency shall consider carefully a submitter's objections and specific grounds for nondisclosure prior to its final determination. If the Agency determines that if must disclose the requested records, notwithstanding the submitter's objections, the Agency shall provide the submitter a written notice which shall include:

(A) A statement of the reasons for which the submitter's disclosure objections were not sustained;

(B) A description of the information to be disclosed; and

(C) A specified disclosure date which is seven (7) business days after the date of the instant notice.

(ii) When notice is given to a submitter under this section, the Agency shall also notify the requester and, if the Agency notifies a submitter that it intends to disclose information, then the requester shall be notified also and given the proposed date for disclosure.

(5) Notice of FOIA lawsuit. If a requester initiates a civil action seeking to compel disclosure of information asserted to be within the scope of this section, the Agency shall promptly notify the submitter. The submitter, as specified in paragraph (a)(2) of this section, shall provide such litigation assistance as required by the Agency and the Department of Justice.

(6) Exceptions to notice requirement. The notice requirements of this section shall not apply if the Agency determines that:

(i) The information should not be disclosed in light of other FOIA exemptions;

(ii) The information has been published lawfully or has been officially made available to the public;

(iii) The disclosure of the information is otherwise required by law or Federal regulation; or

(iv) The designation made by the submitter under this section appears frivolous, except that, in such a case, the Agency will, within a reasonable time prior to the specified disclosure date, give the submitter written notice of any final decision to disclose the information.