Skip to content

Ruling on the computer fraud act's interpretation turns on a single term - 'so'

The U.S. Supreme Court decisively ruled that the Computer Fraud and Abuse Act does not apply to instances where individuals, granted access to a computer system, misuse their authorized access privileges.

Court ruling on computer fraud statute's interpretation centers around a single term - 'therefore'
Court ruling on computer fraud statute's interpretation centers around a single term - 'therefore'

Ruling on the computer fraud act's interpretation turns on a single term - 'so'

The Supreme Court of the United States is currently deliberating on the case of Van Buren vs. U.S., which revolves around the interpretation of the Computer Fraud and Abuse Act (CFAA). The oral arguments, the latest in a series of cases where the government has sought the expansion of federal criminal jurisdiction, have raised concerns about the broad scope of the CFAA.

Justice Samuel Alito expressed his apprehensions about the ambiguities of the CFAA, specifically the unclear definitions of "authorization" or "obtaining or altering information." Alito suggested that adopting Feigin's interpretation could criminalize various activities considered largely innocuous, such as ethical hacking or common consumer activities.

Feigin, arguing on behalf of the government, contended that Congress intended to describe two groups of people who could violate the prongs of the CFAA: individuals without authorization and insiders exceeding their limits. Feigin attempted to prove that there is a "narrowing function" of the definition of access, suggesting that it does not require an individual to do something they couldn't otherwise do.

The DOJ's argument focuses on narrowing the definition of authorization, which Feiner argued protects consumers from falling under the CFAA's scope if the court rules in its favor. Fisher, one of the justices, expressed doubts about the DOJ's argument, stating that logging into a work computer or a Westlaw account establishes authorization, according to Feigin's definition of the term.

Justice Sotomayor appeared frustrated with the DOJ's argument, which she characterized as a request to rewrite the statute to include definitions not contained in the text. The Supreme Court has previously rejected cases seeking the expansion of federal criminal jurisdiction, and Sotomayor's sentiments indicate a potential skepticism towards the DOJ's position.

The U.S. Supreme Court has ruled that Nathan Van Buren did not violate the CFAA. However, the court has yet to deliver a decision on the case Van Buren vs. U.S., which was heard on Monday. If the court rules in favor of the government, the CFAA could implicate individuals in violation of service terms on websites, potentially broadly sweeping over everyday activities.

If the court adopts Feigin's narrow definition of access, it could render the "without authorization" prong of the CFAA irrelevant, further limiting the scope of the act. The outcome of this case has significant implications for the interpretation and application of the CFAA, and the nation eagerly awaits the Supreme Court's decision.

Nathan Van Buren is awaiting further judgement pertaining to a possible violation of the Computer Fraud and Abuse Act (CFAA). The case serves as a crucial test of the limits of federal jurisdiction and the interpretation of the CFAA, shedding light on the ongoing debate surrounding the act's ambiguities.

Read also: