What is the Computer Fraud and Abuse Act of 1984 ("CFAA")?

The CFAA is the main federal criminal statute regulating hacking and other computer crimes.  It amends the Federal criminal code to establish a federal offense of using a computer without authorization or using a computer with authorization for unauthorized purposes with the intent to execute a scheme to defraud, if such conduct obtains: (1) anything of value aggregating $5,000 or more, or creates a loss of $5,000 or more, during any year; (2) classified information; or (3) certain financial records.

It prohibits the unauthorized use of a computer when such conduct modifies, destroys, discloses information or prevents the authorized use of a computer operated for or on behalf of the U.S. government.

It makes it an offense to attempt to commit or to be a party to a conspiracy to commit such an offense.

It increases the penalty for subsequent offenses.

It grants authority to the U.S. Secret Service to investigate offenses under this Act.

It requires the Attorney General to report annually to Congress about prosecutions under this Act during the first three years after its enactment.

Since then, the Act has been amended a number of times—in 1989, 1994, 1996, in 2001 by the USA PATRIOT Act, 2002, and in 2008 by the Identity Theft Enforcement and Restitution Act. With each amendment of the law, the types of conduct that fell within its reach were extended.

 

For more information, see here:  https://www.congress.gov/bill/98th-congress/senate-bill/2864

 

These materials were obtained directly from the Federal Government public websites and are posted here for your review and reference only.  No Claim to Original U.S. Government Works.  This may not be the most recent version.  The U.S. Government may have more current information.  We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to.  Please check the linked sources directly.