Law / United States / 
Michigan
Fraudulent Access to Computers, Computer Systems, and Computer Networks Act
In force since .
A computer misuse rule binding public and private bodies.
- Obligation class
- Access restriction
- Audit expectation
- none
What it requires
- Do not access, or cause access to, a computer, computer system, or computer network without authorization or by exceeding authorization granted, to acquire, alter, damage, delete, or destroy data or property, or to use the system's services (MCL 752.795).NIST AI RMFMAP 4.1
- Do not access or cause access to a computer, computer system, or computer network to devise or execute a scheme to defraud or to obtain money, property, or a service by false pretense (MCL 752.794).NIST AI RMFMAP 4.1
- A public, unauthenticated page or system is not, by itself, evidence that access was authorized: Michigan's rebuttable presumption of unauthorized access is overcome only by showing written or oral permission, a pre-programmed message identifying the system as public domain that displayed before access, or that no access-control procedure had to be bypassed (MCL 752.797(6)).
- Do not use a computer, computer system, or computer network to commit, attempt, conspire to commit, or solicit another person to commit a crime (MCL 752.796).NIST AI RMFMAP 3.3
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 3.3Targeted application scope is specified and documented based on the system’s capability, established context, and AI system categorization.
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
- NIST AI 600-1
- GAI-RISK-09Information Security
- GAI-RISK-12Value Chain and Component Integration
- OWASP LLM Top 10
- LLM03:2026Excessive Agency
- OWASP Agentic Top 10
- ASI03Identity and Privilege Abuse
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-018Agent Authority Least Privilege Framework
- AIR-PREV-023Agentic System Credential Protection Framework
- ETSI EN 304 223
- 5.1.2-6Access the AI system gets to other systems and data sources is minimal and risk assessed.
Our reading of where this law's duties sit in each framework, and in the NIST AI RMF, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
If you get it wrong
Criminal exposureYes
Criminal exposure note
A violation of the fraud-scheme prohibition (MCL 752.794) ranges from a misdemeanor punishable by up to 93 days or a $500 fine (or 3 times the aggregate amount, whichever is greater) at the lowest tier, to a felony punishable by up to 10 years or 3 times the aggregate amount at the highest tier, keyed to the aggregate amount involved and prior convictions. A violation of the unauthorized-access prohibition (MCL 752.795) is a felony punishable by up to 5 years or a $10,000 fine, or up to 10 years or a $50,000 fine with a prior conviction. A violation of the commit-a-crime prohibition (MCL 752.796) is tiered to the maximum term of imprisonment for the underlying offense, from a 1-year misdemeanor up to a 20-year felony.
What it makes you log
Logging duty
Act 53 of 1979 (MCL 752.791 to 752.797) prohibits fraudulent access, unauthorized access, and use of a computer to commit a crime, and sets the penalties, a rebuttable presumption of unauthorized access and a reimbursement order. It imposes no duty to create, keep, produce or review a log or record and states no territorial clause, so no hook is recorded. Section 752.795a makes a violation of the Michigan children's protection registry act a violation of this Act; the registry act's own duties are in another act the row does not cite and none is borrowed.
- Kind
- None
- As of
What this law does
Act 53 of 1979 prohibits intentionally accessing or causing access to a computer, computer system, or computer network to devise or execute a fraud scheme, or to obtain money, property, or a service by false pretense (MCL 752.794).
Separately, MCL 752.795 prohibits intentionally accessing, or causing access to, a computer, computer system, or computer network without authorization or by exceeding valid authorization, to acquire, alter, damage, delete, or destroy property or to use its services, and prohibits planting instructions or a program intended to do the same.
Michigan Act 53 also creates a rebuttable presumption that access was unauthorized, which is rebutted by showing written or oral permission was granted, that the accessed system displayed a pre-programmed message a reasonable person would believe identified it as within the public domain, or that access did not require bypassing an access-control procedure.
MCL 752.796 separately prohibits using a computer, computer system, or computer network to commit, attempt, conspire to commit, or solicit another to commit a crime.
Penalties escalate with the aggregate value involved or the severity of the underlying crime: a violation of the fraud-scheme prohibition ranges from a misdemeanor (93 days, $500, or 3 times the aggregate amount) to a felony (10 years, or 3 times the aggregate amount) as the aggregate loss or prior-conviction count rises; a violation of the unauthorized-access prohibition is a felony punishable by up to 5 years or a $10,000 fine, rising to 10 years or $50,000 with a prior conviction; and a violation of the commit-a-crime prohibition is tiered to the maximum term of the underlying offense, from a 1-year misdemeanor up to a 20-year felony.
When LexLint raises it
When your app profile says your app crawls the web or trains models.
Back to the example · Lint your app
Page updated .