Law / United States / 
Wyoming
Crimes against computer users (bare without-authorization test)
In force since .
A computer misuse rule binding public and private bodies.
- Obligation class
- Access restriction
- Audit expectation
- none
What it requires
- Do not access a Wyoming-connected computer, computer system, or computer network without authorization; this statute has no malicious-intent or deceptive-means gate, so a bare unauthorized access can fit its elements even without resulting damage or disruption.
- No Wyoming court has decided whether accessing an unauthenticated, public web page counts as access without authorization under this statute for a scraping fact pattern; treat that question as unsettled rather than resolved by analogy to a narrower peer-state statute.
- A violation committed with the intent to devise or execute a scheme or artifice to defraud or to obtain property carries a substantially higher penalty, up to ten years' imprisonment and a $10,000 fine, than an ordinary violation, up to three years and a $3,000 fine.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
- NIST AI 600-1
- GAI-RISK-09Information Security
- GAI-RISK-12Value Chain and Component Integration
- OWASP LLM Top 10
- LLM03:2026Excessive Agency
- OWASP Agentic Top 10
- ASI03Identity and Privilege Abuse
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-018Agent Authority Least Privilege Framework
- AIR-PREV-023Agentic System Credential Protection Framework
- ETSI EN 304 223
- 5.1.2-6Access the AI system gets to other systems and data sources is minimal and risk assessed.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
If you get it wrong
Criminal exposureYes
Criminal exposure note
A crime against computer users under Wyo. Stat. Ann. § 6-3-504(a) is a felony punishable by imprisonment for not more than three years, a fine of not more than $3,000, or both, except that it is a felony punishable by imprisonment for not more than ten years, a fine of not more than $10,000, or both, where committed with the intention of devising or executing a scheme or artifice to defraud or to obtain property (§ 6-3-504(b)).
Penalty structure
Base tier for an ordinary violation of Wyo. Stat. Ann. § 6-3-504(b)(i) (bare unauthorized access or denial of service). The same subsection raises the fine to $10,000, with imprisonment of up to ten years instead of three, where the crime is committed with the intention of devising or executing a scheme or artifice to defraud or to obtain property, § 6-3-504(b)(ii).
- Rule
- Fixed only
- As of
- Currency
- USD
- Fixed cap
- 3,000
What it makes you log
Logging duty
Section 6-3-504 makes it a crime to knowingly and without authorization access a computer, computer system or computer network, or to deny computer system services to an authorized user, graded as a felony of up to three years or, where done to defraud or obtain property, up to ten years. It imposes no duty to create, keep, produce or review a log or record and states no territorial clause, so no hook is recorded.
- Kind
- None
- As of
What this law does
Section 6-3-504(a) makes it a crime against computer users for any person, knowingly and without authorization, to access a computer, computer system, or computer network, or to deny computer system services to an authorized user of services owned by, under contract to, or operated for another.
The subsection carries no malicious-intent or intentionally-deceptive-means element in addition to lack of authorization, so an ordinary, non-deceptive automated access to a public, unauthenticated page can fit its bare elements on a plain reading, regardless of whether it disrupts anything.
Two sibling provisions in the same article require more than bare access: section 6-3-502 (crimes against intellectual property) reaches only data with a value of more than $750.00 that is a trade secret or otherwise confidential, and section 6-3-506 (computer trespass) requires intent to damage or cause a malfunction through malware or similar means; ordinary scraping of a public page fits neither.
When LexLint raises it
When your app profile says your app crawls the web.
Back to the example · Lint your app
Page updated .