The Computer Misuse Act 1990

The Computer Misuse Act 1990 (CMA) is a UK law that was introduced to deal with the growing problem of computer crime. Before this act, there was no specific law to deal with hacking, viruses, or other forms of computer-based crime.

---

Why Was the Computer Misuse Act Created?

In 1984, two hackers — Robert Schifreen and Stephen Gold — gained unauthorised access to BT's Prestel email system and even accessed the Duke of Edinburgh's email account. They were prosecuted under the Forgery and Counterfeiting Act 1981, but the case was eventually overturned by the House of Lords because the existing laws were not designed for computer crime.

This highlighted the need for a specific law addressing computer misuse, leading to the Computer Misuse Act 1990.

---

The Three Main Offences

The CMA defines three key offences:

Section 1: Unauthorised Access to Computer Material

• Deliberately accessing a computer system without permission
• This includes guessing or using someone else's password to log in
• Also covers accessing files or data you are not authorised to view
• Maximum penalty: Up to 2 years in prison and/or a fine