California Comprehensive Computer Data Access and Fraud Act

The California Comprehensive Computer Data Access and Fraud Act is in §502 of the California Penal Code.

According to the State Administrative Manual of California, the purposes is as follows:

The Comprehensive Computer Data Access and Fraud Act (Penal Code Section 502) affords protection to individuals, businesses, and governmental agencies from tampering, interference, damage, and unauthorized access to lawfully created computer data and computer systems. It allows for civil action against any person convicted of violating the criminal provisions for compensatory damages.^[1]

Penalties Under the CCCDAFA:

According to the California Comprehensive Computer Data Access and Fraud Act, violations of the law are subject to criminal penalties. For violating some of the more major premises of the Act, the punishment can be up to a $10,000 fine and a 3-year prison term.^[2]

Notable cases:

'People v. Hawkins' (2002)^[3]^[4]
- Hawkins had source code from his previous employer on his home machine.^[3]
'Facebook v. ConnectU', LLC, (2007)^[5]
- ConnectU gathered Facebook data using bots^[6]
Facebook, Inc. v. Power Ventures, Inc.
- Power Ventures scraped data from Facebook^[5]
Facebook, Inc. v. John Does 1-10 (2007)^[7]^[8]
- Various people, including some associated with Istra Holdings, scraped Facebook for data.^[7]
SCEA v. George Hotz et al. (2011)
- Jailbreaking of the PlayStation 3 by George Hotz & associates of fail0verflow

^ Cite error: The named reference cagov1 was invoked but never defined (see the help page).
^ Cite error: The named reference lawscom1 was invoked but never defined (see the help page).
^ ^a ^b Cite error: The named reference justiacom was invoked but never defined (see the help page).
^ Cite error: The named reference peter_toren2003 was invoked but never defined (see the help page).
^ ^a ^b Cite error: The named reference baercrosseycom was invoked but never defined (see the help page).
^ Cite error: The named reference ericgoldmanorg was invoked but never defined (see the help page).
^ ^a ^b Cite error: The named reference arstechnicacom1 was invoked but never defined (see the help page).
^ Cite error: The named reference justiacom1 was invoked but never defined (see the help page).

[cagov1-1] Cite error: The named reference cagov1 was invoked but never defined (see the help page).

[lawscom1-2] Cite error: The named reference lawscom1 was invoked but never defined (see the help page).

[justiacom-3] Cite error: The named reference justiacom was invoked but never defined (see the help page).

[peter_toren2003-4] Cite error: The named reference peter_toren2003 was invoked but never defined (see the help page).

[baercrosseycom-5] Cite error: The named reference baercrosseycom was invoked but never defined (see the help page).

[ericgoldmanorg-6] Cite error: The named reference ericgoldmanorg was invoked but never defined (see the help page).

[arstechnicacom1-7] Cite error: The named reference arstechnicacom1 was invoked but never defined (see the help page).

[justiacom1-8] Cite error: The named reference justiacom1 was invoked but never defined (see the help page).

[1]

[2]

[3]

[4]

[5]

[6]

[7]

[8]