Call Today for a free Consultation
262-923-8761 24 Hour Emergency Contact

Is violating a site's terms of service a criminal act?

America's main anti-hacking law is the federal Computer Fraud and Abuse Act (CFAA), which makes it illegal to "access a computer without authorization or exceed authorized access."

Across the U.S., courts have come to different conclusions about what is prohibited. Would knowingly violating a website's terms of service be considered exceeding authorized access?

In 2009, federal prosecutors tried to hold a California woman criminally responsible for violating MySpace's terms of service. The woman participated in a hoax that led to a 13-year-old girl's suicide. A federal judge, however, rejected the theory and ruled that violating MySpace's terms of service did not violate the CFAA.

In 2015, the Second Circuit Court of Appeals rejected the prosecution of a police officer who, in violation of department policy, used a state database to gather information about women he knew. The court ruled this did not constitute a violation of the CFAA.

But other courts have ruled the other way. In 2010, the Eleventh Circuit upheld the CFAA conviction of a Social Security Administration employee. Like the police officer, he had looked up the personal information of people he knew.

And, in 2006, our own Seventh Circuit ruled that an employee did violate the CFAA when he quit his job and wiped his employer-owned hard drive, which would have revealed his misconduct. The appeals court upheld the conviction even though the man had not hacked the hard drive.

So it was with some trepidation that a group of academics and journalists sued the government to determine if they were about to criminally violate the CFAA.

The activists wanted to investigate race discrimination in online job markets. In order to do so, they needed to set up accounts for fake employers and job seekers. However, this would violate the terms of service of many of the sites they wanted to investigate. The activists worried that they could be criminally prosecuted.

The case came before a federal district court in Washington, D.C., and that court ruled that the activists' plan, although violating the sites' terms of service, would not criminally violate the CFAA.

"Criminalizing terms-of-service violations risks turning each website into its own criminal jurisdiction and each webmaster into his own legislature," wrote the judge.

He also noted that terms of service are often long and complex, and they change frequently and without notice. Most users are unaware of the precise terms, and therefore it would be unreasonable for violating the terms to be considered criminal.

The ruling does not overrule previous appellate court rulings, however, so the question of whether violating terms of service is a CFAA violation remains unclear. Ultimately, the Supreme Court may have to decide.

No Comments

Leave a comment
Comment Information
Choosing the Right Lawyer Buting for the Defense In The News

Our Office

Brookfield Office
400 N. Executive Drive
Suite 205
Brookfield, WI 53005

Phone: 262-923-8761
Phone: 262-821-0999
Fax: 262-821-5599
Map & Directions

Glendale Office
6165 North Green Bay Avenue
Glendale, WI 53209

Map & Directions

How Can
We Help You?


Bold labels are required.

Contact Information

The use of the Internet or this form for communication with the firm or any individual member of the firm does not establish an attorney-client relationship. Confidential or time-sensitive information should not be sent through this form.


Privacy Policy

This site uses Google's Invisible reCAPTCHA, which is subject to Google's Privacy Policy and Terms of Use.

Email Us For A Response
Back To Top payment