Law / United States / 
Utah
Utah Computer Crimes Act (unauthorized access, with an express implied-consent definition)
Utah Code Ann. §§ 76-6-702, 76-6-703
In force since .
A computer misuse rule binding public and private bodies.
- Audit expectation
- none
What it requires
- Do not access a computer, computer system, or network without the owner's express or implied consent or permission.
- Keep any access within the manner and scope of the consent or permission the owner has given.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Who enforces it
Settledness
- As of
- Open questions
- Does an owner who serves a page to the public without a login give "implied consent or permission" under Utah Code section 76-6-702(2) to automated access of that page?
- Does an owner's posted terms of use or robots.txt limit the "manner" of access to which the owner has given "consent or permission" under Utah Code section 76-6-702(2)?
What it makes you log
Logging duty
Sections 76-6-702 and 76-6-703 define the terms of the Utah Computer Crimes Act and make unauthorized access, taking unlawful action after authorized access, and denial of service offences, with affirmative defenses for security investigation and for a service provider's network-security actions. None requires a log or record. The sections have no territorial clause.
- Kind
- None
- As of
What this law does
Section 76-6-703(2)(a) reaches a person who, without authorization or in excess of the actor's authorization, accesses or attempts to access computer technology if the access results in the alteration, damage, destruction, copying, transmission, discovery, or disclosure of computer technology. Computer technology, as defined in Section 76-6-702(7), includes computer data.
Section 76-6-703(2)(b) reaches an actor who, after accessing computer technology that the actor is authorized to access, knowingly takes or attempts to take unauthorized or unlawful action that results in the same consequences. Section 76-6-702(2) defines authorization as having the express or implied consent or permission of the owner to access a computer, computer system, or computer network in a manner not exceeding the consent or permission.
Under Section 76-6-703(3)(c)(v), a violation is a third degree felony if in gaining access the actor breaches or breaks through a security system. The current text of Section 76-6-703 took effect on .
When LexLint raises it
When your app profile says your app crawls the web.
Back to the example · Lint your app
Page updated .