What information is, where it belongs, and why separation protects people and institutions

I. Why This Document Exists at All (Start Here)

U.S. embassies operate on a simple but unforgiving reality:

Once information leaves the institution, you cannot control how it is used, interpreted, or combined.

Information categories and separate systems exist to:

  • protect sources and methods,
  • prevent accidental escalation,
  • preserve diplomatic flexibility,
  • comply with U.S. law,
  • and protect individuals—both American and local.

This is not about secrecy for its own sake.
It is about controlling risk, attribution, and consequence.

II. Core Information Categories (What They Mean in Practice)

1. UNCLASSIFIED (UNCLASS)

What it is

  • Information that can be shared publicly without harm.
  • Includes press releases, public statements, website content, and approved talking points.

Common mistake

  • Assuming “unclassified” means “safe in all contexts.”

Reality

  • Unclassified information can still:
    • cause political fallout,
    • damage relationships,
    • or be misused when combined with other facts.

Operational rule

  • UNCLASS ≠ casual
  • Public information still requires judgment and clearance.

2. SENSITIVE BUT UNCLASSIFIED (SBU)

What it is

  • Information that is not classified, but could cause harm if misused or widely distributed.
  • Often includes internal assessments, draft positions, operational details, and non-public deliberations.

Why it exists

  • Many risks are real but do not meet the legal threshold for classification.

Common mistake

  • Treating SBU as “basically unclassified.”

Reality

  • SBU often causes more damage than classified material if leaked, because:
    • it is easier to circulate,
    • harder to trace,
    • and often misunderstood.

Operational rule

  • Share strictly on a need-to-know basis.
  • Never assume SBU can be repeated to contacts.

3. Personally Identifiable Information (PII)

What it is

  • Information that identifies an individual, such as:
    • names,
    • dates of birth,
    • passport numbers,
    • addresses,
    • employment or immigration status.

Why it is tightly controlled

  • Legal obligation (U.S. law).
  • Personal safety risk.
  • Reputational and diplomatic consequences.

Common mistake

  • Sharing PII “to be helpful.”

Reality

  • Improper handling of PII can:
    • end careers,
    • harm individuals,
    • and expose the U.S. government to legal liability.

Operational rule

  • If you do not explicitly need PII to do your job, you should not have it.
  • Never share PII outside authorized systems or channels.

4. SECRET

What it is

  • Information whose unauthorized disclosure could cause serious damage to national security.

Examples include:

  • sensitive diplomatic reporting,
  • security assessments,
  • intelligence-adjacent material,
  • internal deliberations at high levels.

Why it exists

  • Some information genuinely creates risk at the national or international level.

Common mistake

  • Believing SECRET information is always dramatic or obvious.

Reality

  • Much classified material is mundane but dangerous in aggregate.

Operational rule

  • SECRET information belongs only on approved classified systems.
  • Never paraphrase classified material into unclassified conversations.

5. NOFORN (No Foreign Nationals)

What it is

  • A dissemination control marking.
  • Means information cannot be shared with non-U.S. persons, even if they are trusted partners or LES.

Why it exists

  • Protects sources, methods, or agreements with other governments.

Common mistake

  • Treating NOFORN as a trust judgment.

Reality

  • NOFORN is about legal and policy restriction, not personal reliability.

Operational rule

  • Do not discuss NOFORN material with anyone not explicitly authorized, regardless of intent.

III. Classified vs Unclassified Systems

Why different systems exist

Systems are separated to prevent:

  • accidental disclosure,
  • cross-contamination,
  • and irreversible information bleed.

Once classified information enters an unclassified system—or vice versa—it is almost impossible to undo.

Unclassified Systems

Used for:

  • email,
  • document drafting,
  • public affairs,
  • routine coordination.

These systems prioritize:

  • accessibility,
  • speed,
  • collaboration.

They do not protect against:

  • interception,
  • misuse,
  • or unauthorized access.

Classified Systems

Used for:

  • classified reporting,
  • sensitive analysis,
  • protected communications.

They prioritize:

  • security,
  • access control,
  • auditability.

They are intentionally slower and more restrictive.

The single most important rule

Never move information “down” (classified → unclassified), even informally.

Paraphrasing is still disclosure.

IV. Why “Bleed” Is So Dangerous

Information bleed occurs when:

  • classified or sensitive insights seep into casual conversation,
  • internal deliberations are repeated externally,
  • or multiple unclassified facts are combined to reveal something sensitive.

Bleed is dangerous because:

  • it is rarely traceable,
  • often accidental,
  • and usually discovered only after damage occurs.

Institutions are judged not by intent, but by outcome.

V. Discretion in Speech: Especially With Contacts

Why discretion matters

Contacts—journalists, academics, officials, civil society—often:

  • listen carefully,
  • combine information,
  • and test boundaries.

They may not repeat what you say verbatim, but they will:

  • infer positions,
  • test narratives,
  • and shape expectations.

Even off-hand remarks can become:

  • attributed positions,
  • rumors,
  • or “what the embassy thinks.”

Common dangerous assumptions

  • “This is off the record.”
  • “They already know this.”
  • “I didn’t say it formally.”
  • “It’s just background.”

None of these protect the institution.

Safer mental model

Assume:

  • anything you say could be repeated,
  • possibly inaccurately,
  • possibly without context,
  • possibly at the worst possible time.

That does not mean saying nothing.
It means saying only what you can defend later.

VI. Protecting the Institution Protects You

Information discipline is not about mistrust of colleagues or contacts.

It is about:

  • protecting LES from pressure or retaliation,
  • protecting FSOs from attribution errors,
  • protecting leadership from surprise,
  • protecting U.S. interests from escalation.

Most institutional damage comes not from leaks, but from:

  • casual speech,
  • misplaced helpfulness,
  • and misunderstood intent.

VII. Practical Bottom Lines

  • UNCLASS still requires judgment.
  • SBU is more dangerous than it looks.
  • PII must be tightly protected.
  • SECRET stays on classified systems—always.
  • NOFORN is a legal boundary, not a trust issue.
  • Systems exist to prevent irreversible harm.
  • Discretion in speech is a professional obligation, not secrecy.

When unsure:

  • pause,
  • check,
  • or say less.

That restraint is not weakness.
It is how institutions survive.