Five years after introducing measures that would limit access to information about the nation's energy infrastructure, FERC is again reassessing what protections and procedures are necessary for both protecting and reasonably disseminating this information. On September 21, FERC issued a final rule and a notice of proposed rulemaking (NOPR), addressing critical energy infrastructure information (CEII), which is protected by FERC's regulations. The issuances highlight the balancing act FERC has had to play in protecting sensitive information and ensuring the safety of energy facilities, on the one hand, and in recognizing the due process rights of interested persons who want to participate in FERC regulatory proceedings, on the other. To be considered, public comments on the NOPR must be received by November 2, 2006.
FERC's final rule, Order No. 683, streamlined the requirements interested parties must satisfy in order to obtain CEII, and included the requirement that requesting parties submit a signed non-disclosure agreement along with a request for CEII. FERC also addressed the problem that companies filing information with FERC tend to "over-designate" information as CEII. The agency instructed that CEII is confined to "specific engineering, vulnerability, or detailed design information" that: (1) provides details about the production, generation, transportation, transmission, or distribution of energy; (2) could be useful to a person in planning an attack on critical infrastructure; (3) is exempt from mandatory disclosure under the Freedom of Information Act; and (4) does not simply give the general location of the infrastructure. Descriptions of facilities and processes generally are not CEII unless they describe "specific engineering and design details of critical infrastructure." Other procedural changes included revisions to the way FERC will issue notices of requests for CEII treatment. Since Order No. 683 is procedural in nature, its changes will become effective automatically on November 2, 2006.
The NOPR similarly addresses ways to simplify and clarify FERC's handling of CEII requests. For example, FERC proposes to certify annually filers who repeatedly seek CEII and waive for them the requirement that they submit a signed non-disclosure agreement with each CEII request. Certified parties would only have to submit information to FERC once a year, to maintain their certification. The NOPR will also proposes to cut back on CEII protections for information that can be gleaned from a visual inspection of the facility, or that is otherwise easily attainable from other sources, such as the U.S. Geological Survey or commercial mapping firms. In addition, the NOPR would also allow FERC to impose a fee for processing CEII requests.