Skip to main content

Does An Employee Who Uses a Work Computer for Non Business Purposes Commit a Federal Crime?

On April 10, 2012, an en banc panel of the Ninth Circuit Court of Appeals limited the application of the Computer Fraud and Abuse Act (“CFAA”), 18 U.S.C. § 1030, to violations of restrictions in accessing information, i.e. “hacking,” rather than criminalizing violations of restrictions on use of information obtained through authorized access of a computer. 


In United States v. Nosal, an ex-employee of an executive recruiting firm was prosecuted on the theory that he persuaded current company employees of the company to access the company's proprietary database and provide him with information in violation of corporate computer-use policy, presumably to start a competing business. The government claimed that the violation of this private policy was a violation of the Computer Fraud and Abuse Act (CFAA). Following a decision issued in 2009 by the Ninth Circuit, the district court ruled that violations of corporate policy are not equivalent to violations of federal computer crime law.

The court held that: “We need not decide today whether Congress could base criminal liability on violations of a company or website’s computer use restrictions. Instead, we hold that the phrase ‘exceeds authorized access’ in the CFAA does not extend to violations of use restrictions. If Congress wants to incorporate misappropriation liability into the CFAA, it must speak more clearly.”

Comments

Popular posts from this blog

U.S. Supreme Court Eases Rules for Miranda Warning

Last week, the Supreme Court issued its opinion in Maryland v. Shatzer . Justice Scalia wrote the opinion, which six other Justices joined in full. Justice Thomas concurred in part and concurred in the judgment; Justice Stevens concurred in the judgment. The Court held that a fourteen-day break in custodial interrogation ends the Edwards v. Arizona rule which states that once a suspect invokes his Miranda rights, any subsequent waiver of the right triggered by a police request is deemed involuntary and is the result of coercion. In reversing the decision of the Maryland Court of Appeals, the Court concluded that Shatzer’s return to his normal pre-interrogation life in the general prison population for a period of two-and-one-half years before re-interrogation constituted a sufficient break in custody enable him to voluntarily waive his Miranda rights. Therefore, the Edwards case did not require that Shatzer’s re-interrogation statements be suppressed, and the Court remanded the case ...

Ecstasy qualifies as a controlled substance under Health & Safety Code section 11377

The California 4th District Court of Appeal held that because Ecstasy contains methamphetamine, it qualifies as a controlled substance or an analog to a controlled substance for purposes of Health and Safety Code section 11377. In this case, Appellant was convicted of possession of Ecstasy. He argued insufficient evidence supported the conviction because the drug is neither a controlled substance, nor an analog of any controlled substance for purposes of the statute. Section 11377 prohibits possession of controlled substances which are specified in several other statutes. Ecstasy, also known as MDMA or methyldioxy methamphetamine, is not listed in any of these statutes. But, one of the statutes enumerated in section 11377, namely section 11055, subdivision (d), includes, inter alia, "stimulants" containing any quantity of methamphetamine. In this case, the officer testified Ecstasy includes methamphetamine and has a stimulating effect similar to it. Based on this testimony, t...

Second Circuit Holds that Personal Benefit is Not Required for Insider Trading

Insider trading, or “ securities fraud ,” is prohibited by 18 U.S.C. § 1348 and 15 U.S.C. § 10(b) As the Supreme Court explained in Dirks v. SEC , someone engages in insider trading under §10(b) if they breach a fiduciary duty by disclosing material, nonpublic information in exchange for a personal benefit. However, the Second Circuit’s recent holding in United States v. Blaszczak rejected this personal benefit requirement, at least as it relates to § 1348. The result? The range of conduct that triggers criminal liability under § 1348 is far bigger than the range of conduct that triggers liability under § 10(b). Stated another way, Blaszczak makes it easier for federal prosecutors to go after Title 18 securities fraud because - unlike Title 15 securities fraud - they do no need to prove the existence of a personal benefit.