1 18 U.S.C. § 1030(a)(1).

2 18 U.S.C. § 1030(a)(2).

3 18 U.S.C. § 1030(a)(3).

4 18 U.S.C. § 1030(a)(4).

5 18 U.S.C. § 1030(a)(5).

6 18 U.S.C. § 1030(a)(6).

7 18 U.S.C. § 1030(a)(7).

8 18 U.S.C. § 1030(e)(2).

9 See Shurgard Storage Ctrs., Inc. v Safeguard Self Storage, Inc., 119 F.Supp.2d 1121 (W.D.Wash. 2000).

10 See USA PATRIOT Act of 2001, Pub. L. No. 107-56 § 814(d)(i) (amending 18 U.S.C. § 1030(e)(2)(B)).

11 18 U.S.C. § 1030(g).

12 18 U.S.C. § 1030(cite).

13 America Online, Inc. v LCGM, Inc., 46 F.Supp.2d 444 (E.D. Va. 1998) (defendant who maintained an AOL membership for the purpose of harvesting e-mail addresses of AOL members in violation of AOL’s Terms of Service exceeded authorized access, which combined with demonstrable loss by plaintiff established violation of Section 1030(a)(2)).

14 See, for example, U.S. v Czubinski, infra note 9.

15 Moulton v VC3, 2000 WL 33310901 (N.D. Ga. 2000).

16 See USA PATRIOT Act of 2001, Pub. L. No. 107-56 § 814(d)(10) (amending 18 U.S.C. § 1030(e)(9)). The Homeland Security Act further increased the penalties for some CFAA violations, especially those involving intentional infliction of personal harm. See Homeland Security Act of 2002, Pub. L. No. 107-296, § 225.

17 18 U.S.C. § 1030(g).

18 See, for example, CAL. PENAL CODE § 502 (West Supp. 1992); COLO. REV. STAT. §§ 18-5.5-101 to 18-5.5-102 (1986 & Supp. 1992); DEL. CODE ANN. tit. 11, §§ 931 to 939 (1987 & Supp. 1993); FLA. STAT. ANN. §§ 815.01 to 815.07 (West Supp. 1993); GA. CODE ANN. §§ 16-9-91 to 16-9-94 (1992); ILL. ANN. STAT. Ch. 38 para. 16D-1 to 16D-7; MD. ANN. CODE art. 27, § 146 (Supp. 1991); MASS. GEN. L. ch. 266, § 30 (1990); MICH. STAT. ANN. § 28.529 (Callaghan 1990); MINN. STAT. ANN. §§ 609.87 to 609.891 (West 1987 & Supp. 1992); N.J. STAT. ANN. §§ 2C:20-23 to 2C:20-34 (West Supp. 1992).

19 18 U.S.C. § 2511(1)(a), (c), and (d).

20 18 U.S.C. § 2511(2)(a)(i).

21 18 U.S.C. § 2511(2)(d). The consent section does not apply, however, where the communication is intercepted for the purpose of committing any criminal or tortious act.

22 In re Pharmatrak Privacy Litigation, 329 F.3d 9 (1st Cir. 2003).

23 18 U.S.C. § 2520(b) and (c).

24 18 U.S.C. § 2701.

25 U.S. v Gray, 78 F.Supp.2d 524, 529 (E.D. Va. 1999).

26 16 C.F.R. part 314.

27 Sarbanes-Oxley Act of 2002, Section 404.

28 See Final Rule: Management’s Report on Internal Control over Financial Reporting and Certification of Disclosure in Exchange Act Periodic Reports, Release No. 34-47986 (June 5, 2003), 68 Fed. Reg. 36,636 (June 18, 2003) available at www.sec.gov/rules/final/33-8238.htm.

29 See Interagency Policy Statement on the Internal Audit Function and Its Outsourcing (March 17, 2003) (updating the FDIC’s and other federal banking agencies’ guidance on the independence of an accountant who provides both external and internal audit services to an institution as a result of the auditor independence provisions of the Sarbanes-Oxley Act of 2002) available at www.federalreserve.gov/boarddocs/press/bcreg/2003/20030317/attachment.pdf; Internal Audits, FIL-21-2003 (March 17, 2003) available at www.fdic.gov/news/news/financial/2003/fil0321.html.

30 Cal. Civ. Code § 1798.82.

31 See FTC Press Release, “Guess Settles FTC Security Charges; Third FTC Case Targets False Claims About Information Security” (June 18, 2003) available at http://www.ftc.gov/opa/2003/06/guess.htm. According to the press release, “[t]he settlement will require that Guess implement a comprehensive information security program for Guess.com and its other Web sites.”

32 18 U.S.C. § 3664(f)(1).

33 SEC Rule 17a-4(b)(4).

34 See In re Robertson Stephens, Letter of Acceptance, Waiver and Consent No. CAF030001 (Jan. 2003), p. 12; In re Deutsche Bank Securities, Inc. et al., Letter of Acceptance, Waiver and Consent No. CAF020064 (Nov. 2002), p. 5; SEC Release No. 34-38245 (Jan. 1997) (“Electronic Records Release”), p. 16.

35 SEC Rule 17a-04(f).

36 See NASD Notice to Members, Instant Messaging: Clarification for Members Regarding Supervisory Obligations and Recordkeeping Requirements for Instant Messaging (July 2003), p. 343.

37 See NASD Rule 3010(d); NYSE Rule 342.17.

38 See In re Deutsche Bank Securities, Inc., Goldman, Sachs and Co., Morgan Stanley & Co., Inc., Salomon Smith Barney, Inc., U.S. Bancorp Piper Jaffray Inc., Letter of Acceptance, Waiver and Consent No. CAF020064 (Nov. 2002).

39 Kaufman v Kinkos, Inc., Civ Action No. 18894-NC (Del. Ch. Apr. 16, 2002).

40 See Upjohn Co. v United States, 449 U.S. 383, 389 (1981) (citing 8 J. Wigmore, Evidence § 2290 (McNaughton rev. 1961)).

41 In re Richard Roe, Inc., 68 F.3d 38, 39-40 (2d Cir. 1995).

42 United States v Nobles, 422 U.S. 225, 236-37 (1975) (quoting Hickman v Taylor, 329 U.S. 495 (1947)); see also Upjohn Co. v United States, 449 U.S. 383, 397-98 (1981).

43 Hickman v Taylor, 329 U.S. 495, 510-11 (1947).

44 United States v Adlman, 134 F.3d 1194, 1195 (2d Cir. 1998).