Law / United States /
Arizona
Computer tampering (Arizona's computer-misuse statute)
In force.
A computer misuse rule binding public and private bodies.
- Audit expectation
- none
What it requires
- Do not access an Arizona-connected computer, computer system, or network without authority or in excess of your authorization; paragraph 8 criminalizes bare unauthorized access even without any intent to defraud, damage, or disrupt.NIST AI RMFMAP 4.1
- Nothing in this statute's own text exempts ordinary, non-disruptive automated access to a publicly available page from the authorization requirement, and no Arizona case confirms how that access is treated in a scraping context.
- Do not design a crawler or bot to prevent a user from exiting a site or a connected location in order to compel the user's device to keep communicating with or displaying your service.no control in the NIST AI RMF
- Do not access a computer, computer system, or network operated by the state, a political subdivision, a health care provider, or a clinical laboratory to obtain information required by law to be kept confidential or records that are not public records.NIST AI RMFMAP 4.1
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
Our reading of where this law's duties sit in each framework, and in the NIST AI RMF, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
If you get it wrong
Criminal exposureYes
Criminal exposure note
A class 3 felony where the access is with intent to defraud (paragraph 1); a class 4 felony for knowing alteration, contamination, or reckless disruption (paragraphs 2 through 4), rising to a class 2 felony where the target is a critical infrastructure resource; a class 5 felony for the reckless harassment-type paragraph (paragraph 5); and a class 6 felony for the confidential-information and bare unauthorized-access paragraphs (paragraphs 7 and 8).
What it makes you log
Logging duty
Subsection (A) defines computer tampering as eight kinds of conduct by a person acting without authority or exceeding authorization, from altering or destroying data to knowingly accessing a computer or its data (paragraph 8); subsection (B) sets venue by county, (C) orders forfeiture of the defendant's equipment and (D) makes paragraph 6 an unlawful practice the Attorney General may enforce. No subsection requires anyone to create, keep, produce or review a log or record. The venue clauses in (B)(1) and (B)(2) turn on where the computer is located, which names no territorial hook.
- Kind
- None
- As of
What this law does
Subsection A makes it computer tampering for a person, acting without authority or in excess of authorization of use, to do any of eight listed things: paragraphs 1 through 5 require an added mental state such as intent to defraud, knowing alteration or destruction of data, or reckless disruption, but paragraph 8 separately criminalizes knowingly accessing any computer, computer system, network, software, program, or data at all, with no further intent element beyond knowledge and lack of authority, a bare unauthorized-access offense that is a class 6 felony on its own.
Paragraph 6 criminalizes preventing a user from exiting a site or connected location in order to compel the user's device to keep communicating with or displaying the service, and a violation of that paragraph is also an unlawful practice under the Arizona Consumer Fraud Act, enforceable by the Attorney General in addition to any criminal prosecution.
Paragraph 7 reaches knowingly obtaining confidential or non-public information by accessing a computer operated by the state, a political subdivision, a health care provider, or a clinical laboratory. The codified text carries no history note, and no day on which the section came into force has been located.
When LexLint raises it
When your app profile says your app crawls the web.
Back to the example · Lint your app
Page updated .