The full text of EO 13526, the legal instrument that governs the classification system, is available online at the National Archives website. (ref: https://www.archives.gov/isoo/policy-documents/cnsi-eo.html) The most relevant sections are summarized and quoted below:

Part 1, Sec. 1.1, (a) of that order lays out the standards for classification, including requiring that an entity hold original classification authority to create a classified record.

Part 1, Sec. 1.3, (a) enumerates the specific persons within the executive branch vested with original classification authority and establishes that those individuals may delegate such authority only when necessary.

External Quote:

Paragraph (c) of the section goes into significant depth on the circumstances allowing for delegation and the limitation on re-delegation.

Part 1, Sec. 1.4 lays out the specific categories of information eligible for classification.

External Quote:

The specific categories include what you might expect, e.g., military plans, intelligence activities, etc.

Part 2, Sec. 2.1 lays out the use of derivative classification, the manner in which those authorities are applicable to the operations of federal agencies and departments, and the responsibilities inherent in carrying out those authorities.

Part 2, Sec. 2.2 establishes the requirements that SCGs must abide by and the officials who are authorized to create them.

Part 3, Sec. 3.4 describes the SDR mechanism, which creates a duty on the part of data holders to periodically ensure that information held in their custody requires continuing protection under the classification schedule.

External Quote:

It also establishes that such records, where applicable, must be accessioned to the National Archives in accordance with 44 U.S.C. 2203.

Part 3, Sec. 3.5 describes the MDR mechanism, which lays out particular circumstances under which any person or entity with standing may challenge the continued classification of specific classified records held within U.S. Government custody.

In a 2025 information paper, "AARO and the Declassification Process," the office states that it does not have the authority to unilaterally declassify materials.

External Quote:

This paragraph suggests to me that the office does not hold OCA authority, and therefore must work with data partners to declassify materials originating within the military services, the Military Departments, the Intelligence Community, or the combat support agencies, like DIA. Consequently, AARO acts as a coordinating body (aligning with its statutory duties as contemplated in 50 U.S.C. Sec. 3373(c)) that must solicit declassification reviews from the data owners, who ultimately determine if the information can be released in its entirety, requires redaction, or must remain classified to prevent damage to national security.

(ref: https://www.aaro.mil/Portals/136/PDFs/Information Papers/AARO_Declassification_Info_Paper_2025.pdf, ref: https://uscode.house.gov/view.xhtml?req=(title:50 section:3373 editionrelim)

Inferences based upon information contained in these sources are my own views (informed by my professional experience) and are characterized as such.