18 U.S.C. § 1030

Computer Fraud and Abuse Act

Statute — United States Federal
Effective: October 16, 1986 100 platforms tracked 356 provisions indexed Enforced by: U.S. Department of Justice (DOJ), Federal Courts (private right of action), FBI Last reviewed Apr 22, 2026

Overview

The Computer Fraud and Abuse Act is the primary federal anti-hacking statute. For platform governance, CFAA is foundational because it provides the legal framework under which platforms define and enforce 'authorized access' through their terms of service.

The Supreme Court's 2021 decision in Van Buren v. United States narrowed 'exceeds authorized access' to mean accessing information a person is not entitled to, rather than using permitted access for impermissible purposes.

Platform terms of service routinely reference CFAA-adjacent concepts: prohibitions on scraping, automated access, reverse engineering, and accessing accounts without authorization.

Penalties

Criminal: up to 5-20 years imprisonment. Civil: compensatory damages and injunctive relief (requires $5,000 minimum loss).

Key Articles & Sections

Platforms We Track Subject to CFAA

Recent Changes Related to CFAA

Official Source

View official regulation text →

Get alerted when platforms change their policies — including CFAA-relevant provisions.

Subscribe to Watcher — $9.99/mo