The CUI program (32 CFR 2002.4(s)) specifically defines decontrolling CUI as removing protection or distribution controls from CUI that no longer require controls. The ability to override CUI (both CUI Basic and CUI Specific) and override limited dissemination controls (applied to further a legitimate governmental purpose in dealing with CUI) belongs to all authorized holders, including designating authorities, who originally held information as CUI - but other agencies of the executive branch and, where provided for in a treaty or agreement, non-federal agencies administering CUI.