What is the difference between original classification and derivative classification?
Classification is how the U.S. government protects information whose disclosure could harm national security. There are two distinct ways information becomes classified: through an original classification decision and through derivative classification. Understanding the difference matters for records and information governance professionals because each carries different authority, responsibilities, and accountability.
Original Classification
Original classification is the initial decision that a specific piece of information requires protection in the interest of national security. This is a deliberate judgment that the information falls within recognized categories and that its unauthorized disclosure could reasonably be expected to cause damage.
Key features of original classification:
- It can only be made by an Original Classification Authority (OCA) — an official specifically designated and delegated that power.
- The OCA decides the classification level (such as Confidential, Secret, or Top Secret) and sets the duration, including a declassification date or event where possible.
- The decision must be documented and justified, since it creates the protection that everyone else later relies on.
In short, original classification creates new classified information for the first time.
Derivative Classification
Derivative classification is the far more common activity. It does not involve a new judgment about whether information is sensitive. Instead, it means incorporating, paraphrasing, restating, or generating information that is already classified and carrying forward the markings that an OCA originally assigned.
Key features of derivative classification:
- It is performed by the many employees and contractors who create documents drawing on existing classified material.
- The classifier must apply markings consistent with the source — typically a source document or a classification guide — rather than making an independent sensitivity decision.
- Derivative classifiers are still accountable for marking correctly, citing their sources, and avoiding over- or under-classification.
Why the Distinction Matters
The two roles separate the authority to decide from the duty to apply. Original classifiers establish what is protected and for how long; derivative classifiers faithfully propagate those decisions through the larger body of records. Errors at either stage affect downstream access, oversight, and eventual declassification.
For broader context on classification, oversight, and how protected information is eventually released, see the declassification topic hub.
Sources & further reading
Authoritative government and non-profit references.
- Information Security Oversight Office (ISOO) — National Archives (NARA)
- Controlled Unclassified Information (CUI) — National Archives (NARA)
How to cite this page
APA
RM University Editorial. (2026). What is the difference between original classification and derivative classification?. Records Management University. https://www.recordsmgmt.org/questions/original-classification-vs-derivative-classification/
MLA
RM University Editorial. "What is the difference between original classification and derivative classification?." Records Management University, 16 June 2026, www.recordsmgmt.org/questions/original-classification-vs-derivative-classification/.
Related questions
- Can a hospital or research university hold classified records, and how do FCL and HIPAA rules interact?
- Can a law firm representing a government client retain classified discovery, and who declassifies it after the case?
- Can a multinational company use ISO 15489 as a single recordkeeping standard across all of its countries?
- Can a private citizen request that a specific classified record be declassified?
- Can AI and machine learning reliably assist with declassification review of classified records?