In this month's debate, experts discuss whether the Computer Fraud and Abuse Act is out of date, and if punishments are disproportionate to offenses.
PRO
Jeffrey Hartman, partner, 4Discovery
The law is a unique deterrent against those who trespass into a computer system to steal property or cause damage. Aren't the IP rights of inventors and shareholders just as worthy of protection as the rights of those who would access a computer system with intent to take what is not theirs?
Yes, the CFAA has been tragically misapplied recently, but tossing out a law that has so much potential to protect our economy and the heritage of our inventors is a knee-jerk response to over-zealous prosecutors and provides justice for no one.
Let's tweak the law, removing the criminality of terms of service violations, leaving intact the CFAA's ability to punish real “bad guys.”
CON
Nicole Muryn, director, The Financial Services Roundtable
Attacks continue to increase leaving few institutions out of the line of fire. CFAA needs to be enhanced, not replaced.
A cyber criminal would only face up to five years, while the “old fashioned” bank robber would face up to 10 years for the same amount of stolen funds. This must be rectified.
The CFAA should clarify criminal penalties to include damage to critical infrastructure computers and for unauthorized trafficking of passwords. These legal protections should be extended to intellectual property.
In addition, we must elevate our ability to prosecute individuals outside of our country's borders. This effort must come from America's leadership and diplomatic interactions with foreign countries.
