Among many additions, the new CFAA draft expands the number of ways a person could be prosecuted by punishing anyone who “conspires to commit” violations just like those that have already “completed” the offense. It also adds computer crimes as a form of “racketeering activity,” to allow the Department of Justice to hit computer criminals with further charges in court. And if you’re found guilty, the new CFAA endorses more severe punishments for any offenders by raising the maximum sentences available for certain violations.
Here’s an example of the extreme nature of these recommended punishments: Aaron Swartz, who illegally tapped into and downloaded millions of scholarly papers from the digital journal archive JSTOR while visiting the Massachusetts Institute of Technology, faced four charges under section (a)(4) of the CFAA, with a maximum sentences of five years per charge, for a possible total of 20 years in prison. While many lawyers and experts have recommended reducing these penalties or removing them entirely, the new draft actually increases the maximum for each charge under (a)(4) to 20 years, which means Swartz could have gotten 80 years. NYU law professor James Grimmelman on Monday called this notion “simply obscene.”
But what’s perhaps most troubling to Internet freedom advocates is how the new CFAA even expands the law to include accessing information for an “impermissible purpose,” which means even if you have the right to access the information in the first place, it’s still considered a crime if someone deems you are misusing your access in some way.
According to Kerr, a computer law expert, the language in the new CFAA would make it a felony to “lie about your age on an online dating profile if you intended to contact someone online and ask them personal questions,” or if you violate the terms of service on a government website. Read more via International Business Times...
“In short, this is a step backward, not a step forward,” Kerr said. “This is a proposal to give DOJ what it wants, not to amend the CFAA in a way that would narrow it.”