The law that turned 'joyriding' hackers into serious criminals
In short: In the late 1980s, British hackers were caught for 'shoulder surfing' passwords and exploring systems like a digital playground. Because the existing laws were ill-equipped to handle virtual intrusions, the UK had to draft a new framework. This legislation became the global blueprint for modern cybercrime law.
The Computer Misuse Act 1990 was born from a legal vacuum. In 1988, the House of Lords acquitted Robert Schifreen and Stephen Gold, who had gained unauthorized access to British Telecom's Prestel service. The court ruled that 'dishonestly gaining access' by a trick was not a criminal offense under existing forgery laws. The judges famously described the government's attempt to force these facts into old statutes as a 'Procrustean attempt,' signaling that a new, specific law was required to address the digital frontier.
Introduced by MP Michael Colvin, the 1990 Act established three primary criminal offenses. Section 1 covers basic unauthorized access, which applies even if a hacker only attempts to log in using a password permutation. Sections 2 and 3 deal with more serious 'aggravated' offenses: access with the intent to commit further crimes (like fraud or blackmail) and the unauthorized modification of computer material, such as spreading viruses or launching denial-of-service attacks.
The Act's reach has expanded significantly through various amendments. The Police and Justice Act 2006 and the Serious Crime Act 2015 updated penalties, with some offenses now carrying up to 14 years in prison—or life imprisonment if human welfare or national security is endangered. Interestingly, the Act also impacts legitimate industry practices; for example, a developer was once convicted under Section 3 for using 'time-locking' to disable software over a payment dispute.
While the Act is now a robust model for countries like Canada and Ireland, it remains a subject of debate. Critics originally argued it was hastily drafted and failed to distinguish between 'joyriding' hackers and serious criminals. Furthermore, IT professionals have criticized newer sections that criminalize 'articles' for computer misuse, arguing that many legitimate tools could be swept into illegal status.
Opens the Intellect+ feed with this card first. Swipe up for the next one.
Sources
- Summary by Intellect · source: Computer Misuse Act 1990
- Also: www.legislation.gov.uk — Computer Misuse Act 1990
To cite this card, link to https://intellectplus.co.uk/app/society-computer-misuse-act-1990.
How we source, check and correct cards: Editorial standards.
General information, not professional advice. Spotted an error? Flag the card or see corrections and complaints.
Intellect Plus is a visual educational discovery platform for exploring fascinating facts and ideas. Brain Food, Not Brain Rot. What is Intellect Plus?
Related
More in Communication · More in Society · Latest · A–Z · All topics