SCOTUS narrows the scope of Computer Fraud and Abuse Act, ruling it can't be used to charge people who misused databases they are otherwise entitled to access
Politico
Context & Ripple Effects
The ruling lands after years of pressure on the 1986-era law that critics called outdated and vague: when SCOTUS took up the case, Justice Gorsuch warned that the government's reading risked 'making a federal criminal of us all.' The decision also caps a longer judicial retreat from broad readings — a 2016 appeals court gave prosecutors broad leeway to prosecute password theft, while a 2020 federal court had already held that merely breaking a site's terms of service is not criminal hacking.
First-order effects
Federal prosecutors lose a key tool: workers, contractors, and researchers who misuse databases they are legitimately entitled to enter can no longer be charged under the CFAA for exceeding intended use.
People previously exposed to prosecution over ordinary credential friction — password sharing, internal-data snooping — see their legal risk drop sharply overnight.
Second-order effects
Companies that relied on CFAA threat-of-law to police insiders will lean harder on civil contract enforcement and tighter technical access controls, since the statute no longer backs 'authorized but abusive' use.
The gap between this ruling and the stricter 2016 appellate posture pushes toward congressional action on a CFAA rewrite, giving reformers a concrete line — misuse-with-authorization — to legislate around.
Third-order effects
If the pattern holds, 'hacking' legally redefines around circumventing access controls rather than misusing granted access, narrowing the criminal-cyber perimeter and shifting insider-misconduct disputes from criminal court to employers' HR and civil litigation channels.
The trend: Courts are steadily unwinding the CFAA's expansive interpretation, moving US computer-crime law from policing how authorized users behave to whether they were allowed in at all.
BREAKING: In 6-3 vote, Supreme Court narrows scope of Computer Fraud and Abuse Act, landmark cybercrime law, ruling that it doesn't cover situations where people who are authorized to access a computer system do so for improper reasons. https://www.supremecourt.gov/ ... https://t…
On the one hand, this is good news. On the other hand, when the FBI caught a cop taking bribes *to check if someone was an undercover cop*, how did the prosecutors decide the appropriate thing was a fairly minor computer fraud charge, with no bribery or corruption charges? https:…
This is a big deal. Comes too late to save Aaron Swartz though. And the specific case that the Supreme Court is using to make this decision is about a cop running license plates outside of cop duties. Overall probably good though. https://twitter.com/...
The tragedy here is, if this interpretation had come down prior to 2013, Aaron Swartz would almost certainly still be alive. Swartz was indicted in 2011 on similar accusations of violating @JSTOR's terms of use, among other things. https://twitter.com/...
This was long overdue. The CFAA has been stretched to fit activities that weren't even pipe-dreams when the law was created. It's time to get tech-savvy legislators like @BriannaWu into office so they can make the punishments fit the crimes. (literally) https://twitter.com/...
“The CFAA arose as a national topic of debate in 2011 after the Justice Department indicted Aaron Swartz... a programming prodigy who invented the software behind RSS at age 14, died by suicide two years later.” https://twitter.com/...
Umm here is how Justice Thomas deals with concerns raised by the majority about how a broad interpretation of CFAA risks criminalizing ordinary behavior (like sending personal emails with your work computer). “Much of the Federal Code criminalizes common activity.” 🙃 https://twit…
NEW: In a 6-3 ruling, SCOTUS narrowly interpreted the Computer Fraud and Abuse Act in its decision in Van Buren v. U.S., avoiding what some feared would be a disastrously overly broad interpretation of what constitutes a cybercrime https://www.protocol.com/...
Big news for people who use Excel or Google Sheets as their databases! In all seriousness, while a win, I predict this is going to create new loopholes that will be even more difficult to assess. https://twitter.com/...
Trump appointees (who also happen to bebthe newest/youngest justices) join #SCOTUS liberals to narrow computer crime law known as #CFAA. W/@ericgeller https://www.politico.com/...