Law / United States / 
Idaho
Computer crime (unauthorized access, use, or alteration)
In force.
A computer misuse rule binding public and private bodies.
- Obligation class
- Access restriction
- Audit expectation
- none
What it requires
- Do not knowingly access, attempt to access, or use an Idaho-connected computer, computer system, or network, or its software, program, documentation, or data, without authorization; subsection (3) reaches this as a misdemeanor even without any further intent to defraud, damage, or disrupt.
- Do not knowingly access or use a computer, system, or network with intent to defraud, to obtain money, property, or services by false pretenses, or to commit theft, and do not knowingly and without authorization alter, damage, or destroy a computer, system, network, or the software, program, documentation, or data it contains; either is a felony under subsections (1) and (2).
- Neither this section nor its companion definitions section states what counts as authorization or exempts ordinary, non-disruptive automated access to a publicly available page, and no Idaho case has applied either to a scraping or bulk-collection fact pattern.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
- NIST AI 600-1
- GAI-RISK-09Information Security
- GAI-RISK-12Value Chain and Component Integration
- OWASP LLM Top 10
- LLM03:2026Excessive Agency
- OWASP Agentic Top 10
- ASI03Identity and Privilege Abuse
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-018Agent Authority Least Privilege Framework
- AIR-PREV-023Agentic System Credential Protection Framework
- ETSI EN 304 223
- 5.1.2-6Access the AI system gets to other systems and data sources is minimal and risk assessed.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
If you get it wrong
Criminal exposureYes
Criminal exposure note
A felony under subsections (1) and (2) for access with intent to defraud, to obtain money, property, or services by false pretenses, or to commit theft, or for knowingly and without authorization altering, damaging, or destroying a computer, system, network, or its software, program, documentation, or data; a misdemeanor under subsection (3) for knowingly and without authorization using, accessing, or attempting to access a computer, system, or network, or the software, program, documentation, or data it contains, with no additional intent element.
What it makes you log
Logging duty
Section 18-2202 makes it computer crime to access or use a computer for a fraud, false pretense or theft purpose, to alter, damage or destroy a computer or its data without authorization, and to use or access one without authorization, a felony or a misdemeanor by subsection. It requires no log or record and carries no territorial clause.
- Kind
- None
- As of
What this law does
Subsections (1) and (2) make it computer crime, a felony, to knowingly access, attempt to access, or use a computer, computer system, or network with intent to defraud, to obtain money, property, or services by false pretenses, or to commit theft, or to knowingly and without authorization alter, damage, or destroy a computer, system, network, or the software, program, documentation, or data it contains.
Subsection (3) separately makes it a misdemeanor for any person to knowingly and without authorization use, access, or attempt to access a computer, computer system, or network, or the software, program, documentation, or data contained in it, with no further intent element beyond knowledge and lack of authorization.
Neither this section nor its companion definitions section, Idaho Code section 18-2201, which defines only technical terms such as access, computer, and computer network, states what counts as authorization or exempts ordinary access to a publicly available page. Idaho Code section 18-2202 was added by 1984 Idaho Session Laws chapter 68, section 1, whose enacted text carries no effective-date clause and declares no emergency.
A law with neither takes effect on July 1 of the year of the regular session or sixty days after the session ends, whichever is later, under Idaho Code section 67-510, and no source states the resulting day for this act.
When LexLint raises it
When your app profile says your app crawls the web.
Back to the example · Lint your app
Page updated .