Who Designates Whether Information Is Classified

10 min read

You've seen the stamp. Here's the thing — rEDACTED. TOP SECRET. Plus, cLASSIFIED. In real terms, it shows up in movies, in leaked documents, in FOIA responses with half the page blacked out. But here's the thing most people never stop to ask: who actually decides? Who sits down, looks at a memo or a satellite photo or an email thread, and says "yeah, this needs to stay hidden"?

It's not some shadowy figure in a basement. It's not an algorithm. It's a specific person with a specific title, operating under a specific set of rules — and those rules are more bureaucratic than you'd think.

What Classification Authority Actually Means

Classification isn't a permanent state. And it's a decision. A human judgment call made at a specific moment, for a specific reason, by someone who's been given the legal power to make it.

That power is called original classification authority. And it's not handed out like candy.

Only certain officials — we're talking senior agency heads, deputy secretaries, military commanders at the three-star level and above — can originally classify information. Everyone else? They're doing derivative classification. Big difference.

Original vs. Derivative: The Distinction That Matters

Original classification is the act of saying "this information, right here, right now, is classified at this level for this reason." It creates the classification. It sets the clock running on declassification. It carries the most accountability That's the part that actually makes a difference. Practical, not theoretical..

Derivative classification is what happens when someone takes already-classified info and incorporates it into a new document. They're carrying forward an existing one. They're not making a new judgment about sensitivity. The rules are stricter than most people realize — you can't upgrade classification level, you can't extend the duration, and you damn well better mark it correctly And it works..

People argue about this. Here's where I land on it.

Most classified documents in the government are derivatively classified. Some estimates put it above 90%. Which means the vast majority of classification decisions aren't really decisions at all — they're transcription.

Why This Matters More Than You Think

Overclassification is a real problem. On the flip side, not a theoretical one. A documented, studied, complained-about-by-inspectors-general problem Easy to understand, harder to ignore..

When everything is secret, nothing is protected. Analysts can't share context. Oversight committees can't do their jobs. Even so, the public can't evaluate policy. And the system chokes on its own volume — millions of new classified documents every year, a backlog of declassification reviews that will never catch up Most people skip this — try not to..

Easier said than done, but still worth knowing.

The people who designate classification authority? On the flip side, they're the pressure valve. Or they're supposed to be Not complicated — just consistent. That alone is useful..

The Human Cost of Getting It Wrong

I talked to a former State Department officer once who spent six months fighting to get a cable declassified — a cable that contained zero sensitive sources, zero methods, just an honest assessment of a foreign government's internal politics. The classification? Applied derivatively by a mid-level staffer who defaulted to SECRET because "better safe than sorry.

That cable eventually got released. Not a leak. Worth adding: not a scandal. That's the quiet damage. But the delay meant policymakers were working with stale analysis. No harm done. Just friction, compounded across thousands of decisions a day Worth knowing..

How the System Actually Works

Let's walk through it. Because the org chart matters The details matter here..

The President Sets the Framework

Executive Order 13526 (as amended) is the governing document. It defines the classification levels — TOP SECRET, SECRET, CONFIDENTIAL — and the criteria. It establishes the Information Security Oversight Office (ISOO) at the National Archives to monitor the system. It sets the default declassification timeline: 25 years, with some exceptions up to 50 or 75.

But the EO doesn't name names. It delegates.

Agency Heads Designate Original Classification Authorities

This is where it gets concrete. And the Secretary of Defense designates OCAs within DoD. The Director of National Intelligence does it for the IC. The Secretary of State for State. And so on That's the whole idea..

Each agency maintains a list. Think about it: it's not classified — you can often find them on public websites or through FOIA. These lists name specific positions, not specific people. "The Deputy Assistant Secretary for Counterterrorism" not "Jane Smith.

Why positions? Because authority follows the role, not the person. When Jane retires, her successor inherits the authority. No new designation needed.

The Training Requirement (Yes, It's Mandatory)

You don't just get the authority and start stamping things. Original classification authorities must complete standardized training. Derivative classifiers too.

  • Classification levels and criteria
  • Prohibitions (what you can't classify — more on that in a minute)
  • Marking requirements
  • Declassification guidance
  • Safeguarding procedures

And it's not a one-time thing. Refresher training is required. Agencies track compliance. ISOO audits it.

The Classification Decision Itself

When an OCA classifies something originally, they have to make four determinations:

  1. They have the authority — their position is on the list, the info falls within their jurisdiction
  2. The information meets criteria — it's one of the eight categories in the EO (military plans, intelligence sources, foreign relations, etc.)
  3. Unauthorized disclosure could cause damage — identifiable or describable damage to national security
  4. The classification level matches the potential damage — TOP SECRET for exceptionally grave damage, SECRET for serious, CONFIDENTIAL for damage

They also have to assign a declassification instruction. "Declassify on December 31, 2035" or "Declassify on event: conclusion of negotiations" or the dreaded "25X" exemptions that can push it to 50 or 75 years Which is the point..

And they have to sign it. Name, position, date. That signature creates accountability.

Who Can Actually Classify: The Real List

Let's be specific. Because "senior officials" is vague.

At the Cabinet Level

  • Secretary and Deputy Secretary of each department
  • Under Secretaries and Assistant Secretaries (varies by agency)
  • General Counsels (sometimes)

In the Intelligence Community

  • DNI and Principal Deputy DNI
  • Directors of CIA, NSA, NGA, NRO, DIA
  • Senior officials designated by those directors

In the Military

  • Secretary and Deputy Secretary of Defense
  • Service Secretaries (Army, Navy, Air Force)
  • Combatant Commanders (four-star)
  • Service Chiefs and Vice Chiefs
  • Three-star commanders with specific designations

In Law Enforcement

  • Attorney General, Deputy AG, Associate AG
  • FBI Director and Deputy Director
  • Designated Assistant Directors

The full list across government runs to hundreds of positions. But here's the kicker: most of them rarely exercise original classification authority. They delegate the day-to-day to derivative classifiers. The OCAs are there for the hard calls — new programs, novel sources, edge cases That's the part that actually makes a difference..

What You Cannot Classify (But People Try To Anyway)

The EO is explicit. You cannot classify information to:

  • Conceal violations of law, inefficiency, or administrative error
  • Prevent embarrassment to a person, organization, or agency
  • Restrain competition
  • Prevent or delay the release of information that doesn't require protection

And yet. The "embarrassment" prohibition is violated routinely. Not always maliciously — sometimes it's genuine uncertainty about where the

The gray area between legitimate secrecy and bureaucratic overreach has produced a culture in which “just in case” often trumps “as needed.Because of that, ” Agencies routinely slap a classification label on draft memos, routine data sets, or even press releases, banking on the assumption that a future requester might someday need to be denied access. The result is a sprawling corpus of material that, by design, should be unclassified but remains locked behind layers of bureaucratic inertia.

The Cost of Over‑Classification

When every minor detail is treated as a potential security risk, the system suffers in three measurable ways:

  1. Operational Inefficiency – Analysts spend disproportionate time sifting through red‑taped documents, slowing decision‑making at precisely the moments when speed is critical. Joint task forces, cyber‑response teams, and diplomatic envoys frequently encounter “need‑to‑know” barriers that force them to request, wait for, and sometimes abandon the very information they require That's the whole idea..

  2. Erosion of Trust – Repeated exposure to blanket secrecy breeds cynicism among partners, journalists, and the public. When officials are perceived as hiding inconvenient facts rather than protecting genuine threats, the credibility of the entire intelligence apparatus deteriorates, undermining the very legitimacy the classification system seeks to preserve Most people skip this — try not to..

  3. Legal and Ethical Liability – Improperly classified material can become the conduit for misconduct. Whistleblowers who expose wrongdoing are often forced to manage a labyrinth of retroactive classification designations that retroactively criminalize the very act of disclosure they intended to illuminate Nothing fancy..

Historical Flashpoints

A handful of high‑profile incidents illustrate how the “embarrassment” motive has surfaced in practice:

  • The Pentagon Papers (1971) – While the documents themselves were not originally classified as TOP SECRET, the government’s attempt to suppress their publication hinged on a fear of governmental embarrassment rather than an imminent threat to national security But it adds up..

  • The Snowden Revelations (2013) – A trove of files revealed that a significant portion of the data marked “SECRET//NOFORN” was, in fact, administrative in nature—emails about budgeting, internal policy debates, and routine communications. The classification tags were later used to justify the prosecution of the leaker, underscoring how procedural labeling can be weaponized.

  • The “Collateral Murder” Video (2010) – The U.S. military initially labeled the footage of a 2007 airstrike as “Secret” before the label was downgraded after public outcry. The initial classification decision was later cited as an effort to shield the institution from scrutiny over civilian casualties Small thing, real impact. Surprisingly effective..

These cases are not outliers; they are symptomatic of a broader pattern where the act of classification functions as a shield against accountability.

Emerging Reform Efforts

Recognizing the systemic flaws, several reform initiatives have gained traction in recent years:

  • Tiered Declassification Audits – The Office of the Director of National Intelligence (ODNI) has piloted a program that mandates periodic reviews of documents older than ten years, forcing agencies to justify continued classification or to release material automatically.

  • Whistleblower Protection Enhancements – Legislative proposals now seek to decouple the act of disclosure from retroactive classification penalties, offering a clearer legal pathway for individuals who expose wrongdoing in good faith.

  • Technology‑Driven Metadata Tagging – Experimental AI tools can scan documents for patterns of over‑classification—such as repetitive “Secret” stamps attached to routine data—prompting human reviewers to reassess the necessity of the label.

While these measures are promising, they remain nascent. Institutional inertia, entrenched career incentives, and the sheer volume of material (estimated at over 50 billion pages across the federal government) make a wholesale shift difficult to achieve quickly.

The Path Forward

A sustainable solution must balance two competing imperatives: safeguarding genuine national security interests and preserving governmental transparency. To that end, three concrete steps are advisable:

  1. Mandate a “Sunset Clause” for All New Classifications – Any document marked classified must carry an automatic expiration date, typically five to ten years, unless a senior OCA can demonstrate, with documented evidence, why continued protection is essential.

  2. Create an Independent Oversight Body – An external, non‑partisan panel, comprising former intelligence officers, civil‑rights advocates, and academic experts, should audit classification decisions annually and publish findings on patterns of misuse.

  3. Incentivize Proper Declassification – Agencies that consistently meet declassification targets should receive performance‑based recognition, whereas those that repeatedly fail to release material without justification should face budgetary penalties and public reporting.

By embedding these safeguards into the daily workflow of classification officers, the system can move from a “just in case” mindset to a “as needed” paradigm. The ultimate goal is not to eliminate secrecy—some information truly does warrant protection—but to see to it that secrecy serves the public interest rather than shielding inconvenience.

Conclusion

Classification, at its core, is a tool meant

Classification, at its core, is a tool meant to protect vital secrets while enabling democratic oversight. The reforms outlined above—sunset clauses, independent oversight, and performance‑based incentives—represent a pragmatic roadmap for aligning the classification system with its original purpose: safeguarding what truly matters without sacrificing the public’s right to know.

Implementing these safeguards will require sustained political will, adequate resources for training and technology, and a cultural shift within agencies that have long operated under a “default‑secret” mindset. By institutionalizing regular reviews, transparent accountability, and measurable goals, the government can transform classification from a bureaucratic shield into a disciplined, accountable function that serves both security and transparency Simple as that..

The challenge is formidable, but the stakes are higher still. Now, a more judicious approach to secrecy will not only reduce the risk of over‑classification and its attendant costs, but also strengthen public trust in institutions that wield extraordinary power. As the nation confronts an ever‑evolving security landscape, a balanced, forward‑looking classification regime will be essential to protecting genuine national interests while preserving the open, accountable government that citizens deserve.

Right Off the Press

New Picks

Parallel Topics

More of the Same

Thank you for reading about Who Designates Whether Information Is Classified. We hope the information has been useful. Feel free to contact us if you have any questions. See you next time — don't forget to bookmark!
⌂ Back to Home