Any situation when someone uses controlled unclassified information (CUI) in a manner not in accordance with the policy contained in Executive Order 13556 (or any successor order), 32 Code of Federal Regulations (CFR), the CUI Registry, agency CUI policy, or the applicable laws, regulations, and Government-wide policies that govern the affected information. This may include intentional violations or unintentional errors in safeguarding or disseminating CUI. This may also include designating or marking information as CUI when it does not qualify as CUI.
Sources:
CNSSI 4009-2022
from
Title 32 CFR, Part 2002