How It Works
Computer Fraud and Abuse Act
The main United States federal anti-hacking law, passed in 1986. It makes it a crime to access a computer 'without authorization' or to exceed authorized access. Because the phrase 'exceeds authorized access' was long read broadly, the law has been invoked in cases ranging from data theft to violating a website's terms of service — including the prosecution of Aaron Swartz for downloading academic articles.
Origin
Enacted by the U.S. Congress in 1986 as an amendment to an earlier computer-crime law. In Van Buren v. United States (2021), the Supreme Court narrowed the law, ruling that 'exceeds authorized access' does not cover people who misuse information they are entitled to see.