22 C.F.R. § 9.4
(b) Classification levels.
(c) Classification requirements and considerations.
(1) Information may not be considered for classification unless its unauthorized disclosure could reasonably be expected to cause identifiable or describable damage to the national security in accordance with section 1.2 of the Executive Order, and it pertains to one or more of the following:
(d) Classification limitations and prohibitions.
(e) Duration of classification.
(1) Information shall be classified for as long as is required by national security considerations, subject to the limitations set forth in section 1.5 of the Executive Order. When it can be determined, a specific date or event for declassification in less than 10 years shall be set by the original classification authority at the time the information is originally classified. If a specific date or event for declassification cannot be determined, information shall be marked for declassification 10 years from the date of the original decision, unless the original classification authority determines that the sensitivity of the information requires that it be marked for declassification for up to 25 years from the date of the original decision except for: