The federal government’s Computer Fraud and Abuse Act (CFAA) is intended to protect individuals and businesses from unauthorized access and hacks to computers, as well as to smartphones, tablets, fitness watches, voice assistants, Internet of Things (IoT) devices and appliances – or any device that includes a microchip.
Simply put, the law prohibits intentional access to a computer without authorization or in excess of authorization.
Federal offenses outlined in the Act include:
- Obtaining National Security Information
- Accessing a Computer and Obtaining Information
- Trespassing in a Government Computer
- Accessing a Computer to Defraud and Obtain Value
- Intentionally Damaging by Knowing Transmission
- Recklessly Damaging by Intentional Access
- Negligently Causing Damage and Loss by Intentional Access
- Trafficking in Passwords
- Extortion Involving Computers
- Attempt and Conspiracy to Commit such an Offense
Distribution of malicious code and denial-of-service attacks
Sources:
https://crsreports.congress.gov/product/pdf/R/R47557
https://www.nacdl.org/Landing/ComputerFraudandAbuseAct
