LexLint.ioBeta

Know the law your code answers to.

Law / United States / Arizona

Unlawful possession of an access device

A.R.S. § 13-2316.01

In force.

A computer misuse rule binding public and private bodies.

Audit expectation
none

What it requires

  • Do not knowingly possess, traffic in, publish, or control another person's access device, a credential or similar means of reaching an account or system, without the consent of its issuer, owner, or authorized user and with intent to use or distribute it; this can reach obtaining or trading in login credentials used to collect data from behind a login wall.
  • Possessing five or more unconsented access devices may itself support an inference of intent to use or distribute them.

These lines are LexLint's reading of the law's text.

If you get it wrong

Criminal exposureYes

Criminal exposure note

A class 6 felony for possessing fewer than five access devices, a class 5 felony for five to ninety-nine, and a class 4 felony for one hundred or more.

What it makes you log

Logging duty

Subsection (A) defines the offence, (B) lets possession of five or more devices support an inference of intent to use or distribute them, and (C) grades the felony by the number of devices. No subsection requires anyone to create, keep, produce or review a log or record, and the section has no territorial clause.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Makes it unlawful to knowingly possess, traffic in, publish, or control an access device, a credential or similar means of reaching an account or system, without the consent of its issuer, owner, or authorized user and with intent to use or distribute it; possessing five or more such devices without consent may itself support an inference of that intent.

This reaches obtaining or trading in login credentials or similar access devices used to reach data behind a login wall, rather than the act of automated collection itself. The codified text carries no history note, and no day on which the section came into force has been located.

When LexLint raises it

When your app profile says your app crawls the web.

Back to the example  ·  Lint your app

Page updated .