# 49 CFR § 1520.9: Restrictions on the disclosure of SSI

> Federal · Regulations · In force

URL: https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.9

## Section

- **Citation:** 49 CFR § 1520.9
- **Heading:** Restrictions on the disclosure of SSI
- **Jurisdiction:** Federal
- **Kind:** Regulations
- **Status:** In force
- **Text as of:** September 22, 2026
- **Source:** Publisher's official text
- **Location:** Title 49—Transportation > Subtitle B—Other Regulations Relating to Transportation > CHAPTER XII—TRANSPORTATION SECURITY ADMINISTRATION, DEPARTMENT OF HOMELAND SECURITY > SUBCHAPTER B—SECURITY RULES FOR ALL MODES OF TRANSPORTATION > PART 1520—PROTECTION OF SENSITIVE SECURITY INFORMATION

## Text

(a) Duty to protect information. A covered person must—
(1) Take reasonable steps to safeguard SSI in that person's possession or control from unauthorized disclosure. When a person is not in physical possession of SSI, the person must store it a secure container, such as a locked desk or file cabinet or in a locked room.
(2) Disclose, or otherwise provide access to, SSI only to covered persons who have a need to know, unless otherwise authorized in writing by TSA, the Coast Guard, or the Secretary of DOT.
(3) Refer requests by other persons for SSI to TSA or the applicable component or agency within DOT or DHS.
(4) Mark SSI as specified in § 1520.13.
(5) Dispose of SSI as specified in § 1520.19.
(b) Unmarked SSI. If a covered person receives a record containing SSI that is not marked as specified in § 1520.13, the covered person must—
(1) Mark the record as specified in § 1520.13; and
(2) Inform the sender of the record that the record must be marked as specified in § 1520.13.
(c) Duty to report unauthorized disclosure. When a covered person becomes aware that SSI has been released to unauthorized persons, the covered person must promptly inform TSA or the applicable DOT or DHS component or agency.
(d) Additional Requirements for Critical Infrastructure Information. In the case of information that is both SSI and has been designated as critical infrastructure information under section 214 of the Homeland Security Act, any covered person who is a Federal employee in possession of such information must comply with the disclosure restrictions and other requirements applicable to such information under section 214 and any implementing regulations.

## Nearby sections

- [49 CFR § 1520.1 § 1520.1 Scope.](https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.1.md)
- [49 CFR § 1520.3 § 1520.3 Terms used in this part.](https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.3.md)
- [49 CFR § 1520.5 § 1520.5 Sensitive security information.](https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.5.md)
- [49 CFR § 1520.7 § 1520.7 Covered persons.](https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.7.md)
- [49 CFR § 1520.9 § 1520.9 Restrictions on the disclosure of SSI.](https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.9.md)
- [49 CFR § 1520.11 § 1520.11 Persons with a need to know.](https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.11.md)
- [49 CFR § 1520.13 § 1520.13 Marking SSI.](https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.13.md)
- [49 CFR § 1520.15 § 1520.15 SSI disclosed by TSA or the Coast Guard.](https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.15.md)
- [49 CFR § 1520.17 § 1520.17 Consequences of unauthorized disclosure of SSI.](https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.17.md)
- [49 CFR § 1520.19 § 1520.19 Destruction of SSI.](https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.19.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/ecfr-49-1520.9. Check the current official text before relying on it. Not legal advice.