How does a defense contractor handle declassification of CUI and classified records when a contract ends?

When a government contract ends, a defense contractor does not simply decide on its own what to do with classified or Controlled Unclassified Information (CUI). The contractor is a custodian of information the government owns, and disposition is governed by the contract, by federal security rules, and by direction from the contracting agency.

A key distinction: declassification is not the contractor’s call

It is important to separate two ideas. Declassification, lowering or removing a classification level, is a decision reserved for the original classification authority within the government, not the contractor. A contractor cannot unilaterally declassify records. What a contractor does at contract end is far more often proper disposition: returning, retaining under instruction, or destroying material according to the contract and the agency’s guidance.

What typically happens at contract close-out

Close-out for classified and CUI material generally follows a sequence:

• Follow the contract and security guidance. Classified work is performed under a security agreement and a classification guide that specify how material is marked, stored, and disposed of. CUI is handled under the categories and safeguarding rules in the governmentwide CUI program.
• Account for all material. The contractor inventories classified holdings, hard copy and electronic, so nothing is unaccounted for.
• Return or destroy on direction. Material is returned to the agency or destroyed using approved methods only when the government authorizes it. Some records must be retained for a stated period; others must come back so the agency can manage retention, future declassification review, or release.
• Document the actions. Certificates of destruction or transfer records show that disposition followed the rules.

Why records must survive close-out

Even after a contract ends, the underlying records may still have value to the government for litigation, audits, Freedom of Information Act requests, and eventual declassification review years later. For that reason, contractors should never treat the end of work as license to dispose of information freely. When in doubt, the contractor asks the contracting officer or security officer for written direction rather than guessing.

A contractor’s core responsibility is stewardship: safeguard the material, account for it, and let the owning agency control timing and method of declassification and final disposition.

For more, see our declassification topic hub.