Computer Fraud and Abuse Act (CFAA)

The Computer Fraud and Abuse Act (CFAA) prohibits unauthorized access to protected computer systems. CFAA also prohibits elevation of privileges by an authorized user beyond authorized levels. Under this law, codified as 18 U.S.C. 1030, prohibited activities include:

• computer trespassing
• damaging a government or commercial computer
• committing fraud, including unauthorized access
• threatening to harm a computer
• trafficking in stolen passwords

References:

http://ilt.eff.org/index.php/Computer_Fraud_and_Abuse_Act_(CFAA)

http://www.fas.org/sgp/crs/misc/97-1025.pdf