Focusing the CFAA in Van Buren

Abstract

Van Buren v. United States (2021) is the United States Supreme Court's first decision interpreting the federal computer crime law known as the Computer Fraud and Abuse Act (CFAA). This essay, presents an overview of the decision and its significance for debates over the CFAA's meaning. It analogizes Van Buren to partially focusing a lens: The Court’s opinion brings new ground into focus, letting us see a range of landmarks that were blurry before. But it leaves important details hazy, leaving their resolution to future cases that can bring the CFAA into sharper focus. It also argues that Van Buren's reasoning provides substantial support for an authentication-based understanding of CFAA liability.

Keywords: CFAA, Computer Fraud and Abuse Act, Van Buren, authorized access

JEL Classification: K14, K42