The Computer Fraud and Abuse Act: Protecting the United States from Cyber-Attacks, Fake Dating Profiles, and Employees Who Check Facebook at Work

Kristin Westerhorstmann

2015-07-17

Abstract:Each year, the frequency and severity of cyber-attacks continue to increase. With each new threat comes more pressure on the government to implement an effective plan for preventing these attacks. The first instinct has been to attempt either to enact more laws, or to broaden the scope of already-existing laws such as the Computer Fraud and Abuse Act (“CFAA”). The CFAA, the federal hacking statute, has been called the “worst law in technology” for its excessively broad scope and vague provisions, which have resulted in arbitrary and discriminatory enforcement, conflicts with the federal private nondelegation doctrine, and in overcriminalization. In addition, significant amendments throughout the past two decades have left the protection of privacy—once a central interest of the original CFAA—minimalized to the point of forgotten. What was once a narrow statute formulated to prevent hackers from stealing government information and breaching critical infrastructure has turned into an unrecognizably broad statute that criminalizes common computer use such as deleting cookies, lying about one’s age on Facebook, or checking personal email * Chief Symposium Editor, 2015-2016, University of Miami National Security & Armed Conflict Law Review; Juris Doctor Candidate 2016, University of Miami School of Law. Thank you to Sarah Fowler, Chief Notes Editor 2014-2015, for all of your hard work, commitment, and patience. Thank you to all of my friends and family for your unwavering and constant support. A special thank you to my advisor and internet hero, Professor Mary Anne Franks, for all of your support, direction, and advice. 146 U. MIAMI NAT’L SECURITY & ARMED CONFLICT L. REV. [Vol. V:145 while at work. In order to actually combat cyber-attacks, protect people’s online interests, and remedy the problems facing the current CFAA, this Note argues that the broad, catchall language of the statute must be discarded to make way for a new, more narrow, specific framework.

Computer Science,Law,Political Science