The IT Law Wiki
No edit summary
Line 7: Line 7:
   
 
==Legislative History==
 
==Legislative History==
The term '''protected computer''' did not appear in the [[CFAA]] until 1996, when [[Congress]] attempted to correct deficiencies identified in earlier versions of the statute. In 1994, Congress amended the [[CFAA]] so that it protected any "[[computer]] used in [[interstate commerce]] or [[communication]]" rather than a "[[Federal interest computer]]." This change expanded the scope of the Act to include certain non-government [[computer]]s that [[Congress]] deemed deserving of federal protection.<ref>''See'' S. Rep. No. 104-357, at 10 (1996), ''available at'' 1996 WL 492169 (discussing the 1994 amendment).</ref> In doing so, however, [[Congress]] "inadvertently eliminated Federal protection for those Government and [[financial institution]] [[computers]] not used in [[interstate commerce]]." <ref>''United States v. Middleton,'' 231 F.3d 1207, 1212 n.2 (9th Cir. 2000) (citing S. Rep. No. 104-357).</ref>
+
The term '''protected computer''' did not appear in the [[CFAA]] until 1996, when [[Congress]] attempted to correct deficiencies identified in earlier versions of the statute. In 1994, Congress amended the [[CFAA]] so that it protected any "[[computer]] used in [[interstate commerce]] or [[communication]]" rather than a "[[Federal interest computer]]." This change expanded the scope of the Act to include certain non-government [[computer]]s that [[Congress]] deemed deserving of federal protection.<ref>''See'' S. Rep. No. 104-357, at 10 (1996), ''available at'' 1996 WL 492169 (discussing the 1994 amendment).</ref> In doing so, however, [[Congress]] "inadvertently eliminated Federal protection for those Government and [[financial institution]] [[computers]] not used in [[interstate commerce]]." <ref>[[U.S. v. Middleton|United States v. Middleton]], 231 F.3d 1207, 1212 n.2 (9th Cir. 2000) (citing S. Rep. No. 104-357).</ref>
  +
[[Congress]] corrected this error in the 1996 amendments to the [[CFAA]], which defined "protected computer" as a [[computer]] used by the [[federal government]] or a [[financial institution]], or one "which is used in [[interstate commerce|interstate]] or [[foreign commerce]]."<ref>18 U.S.C. 1030(e)(2) (1996).</ref> The definition did not explicitly address situations where an attacker within the United States attacks a [[computer system]] located abroad. In addition, this definition was not readily applicable to situations in which individuals in foreign countries routed communications through the United States as they hacked from one foreign country to another.
+
[[Congress]] corrected this error in the 1996 amendments to the [[Computer Fraud and Abuse Act]] )[[CFAA]]), which defined "protected computer" as a [[computer]] used by the [[federal government]] or a [[financial institution]], or one "which is used in [[interstate commerce|interstate]] or [[foreign commerce]]."<ref>18 U.S.C. 1030(e)(2) (1996).</ref> The definition did not explicitly address situations where an attacker within the United States attacks a [[computer system]] located abroad. In addition, this definition was not readily applicable to situations in which individuals in foreign countries routed communications through the United States as they hacked from one foreign country to another.
   
 
In 2001, the [[USA PATRIOT Act]] amended the definition of "protected computer" to make clear that this term includes [[computer]]s outside of the United States so long as they affect "[[interstate commerce|interstate]] or [[foreign commerce]] or [[communication]] of the United States."<ref>18 U.S.C. § 1030(e)(2)(B) (2001).</ref>
 
In 2001, the [[USA PATRIOT Act]] amended the definition of "protected computer" to make clear that this term includes [[computer]]s outside of the United States so long as they affect "[[interstate commerce|interstate]] or [[foreign commerce]] or [[communication]] of the United States."<ref>18 U.S.C. § 1030(e)(2)(B) (2001).</ref>

Revision as of 07:48, 9 August 2009

Definition

The term protected computer is defined in the Computer Fraud and Abuse Act (CFAA) (18 U.S.C. § 1030(e)(2)), as

“a computer
(A) exclusively for the use of a financial institution or the United States Government, or, in the case of a computer not exclusively for such use, used by or for a financial institution or the United States Government and the conduct constituting the offense affects that use by or for the financial institution or the Government; or
(B) which is used in interstate or foreign commerce or communication, including a computer located outside the United States that is used in a manner that affects interstate or foreign commerce or communication of the United States.”

Legislative History

The term protected computer did not appear in the CFAA until 1996, when Congress attempted to correct deficiencies identified in earlier versions of the statute. In 1994, Congress amended the CFAA so that it protected any "computer used in interstate commerce or communication" rather than a "Federal interest computer." This change expanded the scope of the Act to include certain non-government computers that Congress deemed deserving of federal protection.[1] In doing so, however, Congress "inadvertently eliminated Federal protection for those Government and financial institution computers not used in interstate commerce." [2]

Congress corrected this error in the 1996 amendments to the Computer Fraud and Abuse Act )CFAA), which defined "protected computer" as a computer used by the federal government or a financial institution, or one "which is used in interstate or foreign commerce."[3] The definition did not explicitly address situations where an attacker within the United States attacks a computer system located abroad. In addition, this definition was not readily applicable to situations in which individuals in foreign countries routed communications through the United States as they hacked from one foreign country to another.

In 2001, the USA PATRIOT Act amended the definition of "protected computer" to make clear that this term includes computers outside of the United States so long as they affect "interstate or foreign commerce or communication of the United States."[4]

References

  1. See S. Rep. No. 104-357, at 10 (1996), available at 1996 WL 492169 (discussing the 1994 amendment).
  2. United States v. Middleton, 231 F.3d 1207, 1212 n.2 (9th Cir. 2000) (citing S. Rep. No. 104-357).
  3. 18 U.S.C. 1030(e)(2) (1996).
  4. 18 U.S.C. § 1030(e)(2)(B) (2001).