Crime of unauthorized computer access expansion to include accessing a computer without penetrating a security system

2025-2026 Regular Session Introduced by Eric Lucero

Expands unauthorized computer access to include non-penetration cases, making any unauthorized system access criminal under the same framework as penetrations.

Referred to Judiciary and Public Safety

#crimesandcriminals #publicsafetyandpublicsafetydepartment #telecommunicationsandinformationtechnology

Overview

SF 703 proposes to expand Minnesota’s crime of unauthorized computer access to cover situations where an individual accesses a computer without penetrating a security system. The bill aims to broaden the scope of criminal liability for unauthorized computer access beyond circumstances that involve defeating or penetrating a security barrier.

Bill Number: SF 703 (Senate)

Companion Bill: HF 2630 (House)

Status: Referred to Judiciary and Public Safety

Introduced: January 27, 2025

Subject: Crimes and Criminals; Public Safety; Telecommunications and Information Technology

Purpose and Intent

The primary goal is to strengthen legal protections against unauthorized access to computer systems by removing the requirement that access must involve penetrating a security system.

By broadening the criminalizes of unauthorized access, the bill seeks to deter a wider range of cyber intrusions and clarify that any unauthorized access to a computer system can be prosecutable.

Key Provisions (as indicated by the bill’s title and status)

Expand the definition of unauthorized computer access to include:

Access to a computer system without authorization, even when no security system is penetrated.

Apply the same criminal framework to these additional unauthorized-access scenarios as currently applied to situations involving security-system penetration (specific penalties and conduct definitions would be in the bill text).

Align with existing or related statutes governing computer-related offenses, public safety, and information technology.

Note: The exact statutory language, thresholds for what constitutes “unauthorized access,” and the penalties are contained in the bill text not provided here. This summary highlights the substantive expansion described by the title.

Who/What Would Be Affected

Individuals who gain unauthorized access to computer systems in Minnesota, including scenarios where there is no breach of a security barrier.

Private sector actors (e.g., businesses and service providers) and public sector entities whose computer systems could be subject to criminal liability for unauthorized access.

Law enforcement and prosecutorial agencies responsible for enforcing computer-crime statutes.

Procedural and Timeline Aspects

Introduced and first read on January 27, 2025.

Referred to two committees: Judiciary and Public Safety, signaling potential consideration of legal definitions, penalties, and enforcement mechanisms.

The companion measure in the House (HF 2630) may be considered in parallel, and if enacted, would align House and Senate statutes on unauthorized computer access.

Potential Implications and Considerations

Clarity and consistency: The bill may reduce ambiguity by clarifying that unauthorized access without security-system penetration is criminal.

Enforcement scope: Could broaden prosecutable conduct in cyber incidents, affecting individuals and organizations.

Policy trade-offs: As with any expansion of criminal liability, considerations include ensuring appropriate mens rea (intent) standards, proportional penalties, and safeguards against over-criminalization or unintended consequences for researchers or legitimate security testing.

If you’d like, I can incorporate the bill’s exact text or draft a side-by-side comparison with current Minnesota law once those provisions are available.

Bill