Classification Challenges by Authorized Holders

Within the U.S. national security classification system, classification is not meant to be permanent or beyond question. The framework that governs classified information explicitly recognizes that the people who work with classified material every day—the “authorized holders”—are often best positioned to notice when something has been classified improperly, over-classified, or kept classified long after its sensitivity has lapsed. To address this, the system provides a formal mechanism known as a classification challenge: a structured process by which an authorized holder can question, in good faith, whether information is or should remain classified, or whether it carries the correct level and duration of protection.

Classification challenges sit at the intersection of information security and records management. They are a self-correcting feature of the classification system, intended to counter the natural bias toward over-protection and to keep classification decisions disciplined, defensible, and tied to genuine national security need rather than habit or convenience. Understanding how these challenges work—and the safeguards that surround them—is essential for any organization that creates, handles, or stewards classified records and the declassification activities that eventually follow. For broader context on how protected information is eventually released, see the declassification topic hub.

Who Is an Authorized Holder

An authorized holder is, in general terms, any individual who has been granted access to classified information through proper authority—typically a person with an appropriate security clearance and a demonstrated need to know. This includes original and derivative classifiers, analysts, records managers, contractors operating under cleared facility agreements, and others who lawfully possess classified material in the course of their duties.

The right to challenge classification is tied to this status of lawful access. Because authorized holders interact directly with the substance of the information, they can recognize when a marking does not match the content: when a document is classified at too high a level, when its declassification instructions are missing or inconsistent, or when the underlying justification no longer holds. The classification system deliberately extends the challenge right broadly, rather than reserving it to senior officials, precisely so that error-correction can happen close to where the information actually lives.

Grounds for a Classification Challenge

Authorized holders may raise a challenge on several distinct grounds, and it is useful to separate them because each implicates a different kind of error:

• Improper classification: information that does not meet the substantive criteria for classification at all, or that was classified to conceal violations of law, inefficiency, or administrative error rather than to protect national security.
• Over-classification: information classified at a higher level (for example, Secret rather than Confidential) than the potential damage from disclosure would justify.
• Incorrect duration or markings: a missing, erroneous, or unjustifiably long declassification date or event, or classification markings that are internally inconsistent.
• Changed circumstances: information whose sensitivity has diminished over time or following public events, such that continued classification is no longer warranted.

A challenge is meant to be a reasoned, good-faith assertion. It is not a refusal to follow markings while the matter is pending; the holder must continue to protect the information at its currently marked level until the challenge is formally resolved.

How the Process Works

Most agencies require that challenges begin informally, encouraging the holder to raise the question with the originating office or a classification official so that obvious errors can be corrected quickly and without bureaucracy. If the informal route does not resolve the matter, the holder may submit a formal written challenge to the appropriate authority within the agency.

Agencies are expected to establish clear procedures for receiving, tracking, and adjudicating challenges and to respond within a reasonable, defined period—acknowledging the challenge promptly and providing a substantive decision or a status update if more time is needed. The deciding authority must either sustain the existing classification with an explanation or correct it. Critically, the holder retains the right to appeal an unfavorable decision, ultimately to an external body that adjudicates classification disputes at the interagency level. This appellate structure ensures that no single originating office has the last word on whether its own information is properly classified.

Protections for Holders Who Challenge

A challenge mechanism only works if people feel safe using it. For that reason, the system prohibits retaliation against authorized holders who bring good-faith challenges. A holder may not be subjected to adverse personnel action—loss of clearance, reprisal, or other penalty—simply for questioning a classification decision through proper channels.

These anti-retaliation protections are central to the integrity of the process. Over-classification persists in part because challenging a superior’s classification judgment can feel professionally risky; explicit protection is the counterweight. Holders are likewise expected to act responsibly: challenges must be brought in good faith, through established channels, and without disclosing the disputed information to anyone not authorized to receive it.

Oversight and the Role of ISOO

The Information Security Oversight Office (ISOO), within the National Archives, oversees the executive-branch classification system and monitors how agencies implement requirements including classification challenges. ISOO collects data on agency performance, issues guidance, and reports on systemic problems such as chronic over-classification. Persistent patterns of sustained-but-wrong classifications, or agencies that discourage challenges, are exactly the kind of issue oversight is designed to surface.

This oversight connects classification challenges to the larger declassification enterprise. Challenges resolved in favor of declassification feed directly into the downgrading and release of records, and the National Declassification Center coordinates the systematic review of permanently valuable classified records as they age toward openness.

Recordkeeping and Lifecycle Implications

From a records management standpoint, a classification challenge is itself a record. The challenge, the response, any appeal, and the final disposition should be captured, retained, and linked to the affected information so that the audit trail is complete and the corrected status propagates to every copy and derivative use. When a challenge changes a classification level or declassification instruction, downstream systems, indexes, and finding aids must be updated to reflect the new reality.

This is why modern electronic recordkeeping requirements emphasize reliable metadata, immutable audit logs, and disposition tracking. Notably, NARA revoked its longstanding endorsement of the DoD 5015.2 design criteria in 2022, shifting toward the Universal Electronic Records Management (ERM) Requirements developed through the Federal ERM Initiative (FERMI). For classification challenges, the practical implication is that systems must be able to record who challenged what, when, on what grounds, and how it was resolved—so that classification decisions, and their corrections, remain transparent and defensible throughout the record’s lifecycle.