What is the Computer Fraud and Abuse Act (CFAA)? | UpGuard

### Executive Summary This document is a comprehensive overview of the U.S. Computer Fraud and Abuse Act (CFAA). It explains the law's scope and key definitions (protected computers; "exceeding authorized access"), lists criminal provisions and maximum penalties, outlines the two-year statute of limitations, summarizes landmark court decisions (including Van Buren and the Aaron Swartz case) that shaped interpretation, and recommends organizational protections such as data mapping and zero-trust architecture. The text is informational and legal in nature rather than a report of a specific cybersecurity incident.