Third Circuit Aligns With the Supreme Court’s Limit on the Scope of the Computer Fraud and Abuse Act
Does an employee logging into the computer of an employee away from the office, at the request of said employee, to access a document and email it to the employee away from the office constitute criminal behavior under the Consumer Fraud and Abuse Act, 18 U.S.C. §1030 (CFAA), a federal statute that imposes criminal penalties and provides for a civil cause of action against individuals who obtain information from a computer by intentionally accessing the computer without authorization or by exceeding authorized access? Also at issue is whether passwords constitute trade secrets under federal and applicable state trade secrets law. In its recent opinion in NRA Grp., LLC v. Durenleau, the Court of Appeals for the Third Circuit adopted the United States Supreme Court’s holding in Van Buren v. United States regarding the scope of the CFAA’s “exceeds authorized access” clause. In Durenleau, the Third Circuit held that while these types of actions by employees may violate an employer’s workplace computer-use policy, infractions of this nature do not rise to the level of federal crimes under the CFAA. Background In January 2021, while employed with the debt-collection firm, National Recovery Agency (NRA), Nicole Durenleau, NRA’s Senior Manager of Compliance Services, was out sick due to COVID-19. While out of the office, an urgent request was...