[dc396]

My understanding is that this NDA is far broader in scope than CUI. CUI restrictions only apply to information explicitly marked or identified as CUI.

The draft NDA would apply to “confidential government information,” defined much more broadly than CUI to include non‑public internal operations, personnel matters, deliberative or pre‑decisional materials, and other information an agency deems sensitive, whether or not it falls under existing CUI categories -- it's an open-ended personnel instrument defined by the administration rather than an information handling regime tightly anchored to statutory/regulatory bases than span administrations.

In other words, it's a tool to allow the administration to go after someone who leaks anything the administration doesn't want leaked for open ended reasons.

[oops. That was intended as a response to Jtsummers]