76-6-703.7.  Unlawful computer access.

(1)  Terms defined in Sections 76-1-101.5 and 76-6-702 apply to this section.

Attorney's Note

Under the Utah Code, punishments for crimes depend on the classification. In the case of this section:
ClassPrisonFine
class B misdemeanorup to 6 monthsup to $1,000
For details, see Utah Code § 76-3-204

Have a question?
Click here to chat with a criminal defense lawyer and protect your rights.

Terms Used In Utah Code 76-6-703.7

  • Access: means to directly or indirectly use, attempt to use, instruct, communicate with, cause input to, cause output from, or otherwise make use of any resources of a computer, computer system, computer network, or any means of communication with any of them. See Utah Code 76-6-702
  • Actor: means a person whose criminal responsibility is in issue in a criminal action. See Utah Code 76-1-101.5
  • Authorization: means having the express or implied consent or permission of the owner, or of the person authorized by the owner to give consent or permission to access a computer, computer system, or computer network in a manner not exceeding the consent or permission. See Utah Code 76-6-702
  • Computer: means any electronic device or communication facility that stores, processes, transmits, or facilitates the transmission of data. See Utah Code 76-6-702
  • Computer network: means :
    (a) the interconnection of communication or telecommunication lines between:
    (i) computers; or
    (ii) computers and remote terminals; or
    (b) the interconnection by wireless technology between:
    (i) computers; or
    (ii) computers and remote terminals. See Utah Code 76-6-702
  • Computer property: includes electronic impulses, electronically produced data, information, financial instruments, software, or programs, in either machine or human readable form, any other tangible or intangible item relating to a computer, computer system, computer network, and copies of any of them. See Utah Code 76-6-702
  • Computer system: means a set of related, connected or unconnected, devices, software, or other related computer equipment. See Utah Code 76-6-702
  • Computer technology: includes :
    (a) a computer;
    (b) a computer network;
    (c) computer hardware;
    (d) a computer system;
    (e) a computer program;
    (f) computer services;
    (g) computer software; or
    (h) computer data. See Utah Code 76-6-702
  • Conduct: means an act or omission. See Utah Code 76-1-101.5
  • Interactive computer service: means an information service, system, or access software provider that provides or enables computer access by multiple users to a computer server, including a service or system that provides access to the Internet or a system operated, or services offered, by a library or an educational institution. See Utah Code 76-6-702
  • Offense: means a violation of any penal statute of this state. See Utah Code 76-1-101.5
  • Person: means an individual, public or private corporation, government, partnership, or unincorporated association. See Utah Code 76-1-101.5
  • Property: includes both real and personal property. See Utah Code 68-3-12.5
  • Service provider: means a telecommunications carrier, cable operator, computer hardware or software provider, or a provider of information service or interactive computer service. See Utah Code 76-6-702
  • State: when applied to the different parts of the United States, includes a state, district, or territory of the United States. See Utah Code 68-3-12.5
  • United States: includes each state, district, and territory of the United States of America. See Utah Code 68-3-12.5
  • (2)  An actor commits unlawful computer access if:

    (a)  the actor intentionally or knowingly, and without authorization, gains or attempts to gain access to a computer, computer network, computer property, or computer system; and

    (b)  the circumstances of the violation of Subsection (2)(a) do not constitute an offense under Section 76-6-703, 76-6-703.1, 76-6-703.3, or 76-6-703.5.

    (3)  A violation of Subsection (2) is a class B misdemeanor.

    (4) 

    (a)  Notwithstanding Subsection (2), a retailer that uses an electronic product identification or tracking system, or other technology, to identify, track, or price goods is not guilty of a violation of this section if the equipment designed to read the electronic product identification or tracking system data and used by the retailer to identify, track, or price goods is located within the retailer’s location.

    (b)  It is an affirmative defense to a violation under this section that the actor obtained access or attempted to obtain access:

    (i)  in response to, and for the purpose of protecting against or investigating, a prior attempted or successful breach of security of computer technology whose security the actor is authorized or entitled to protect, and the access attempted or obtained was no greater than reasonably necessary for that purpose; or

    (ii)  pursuant to a search warrant or a lawful exception to the requirement to obtain a search warrant.

    (c)  In accordance with 47 U.S.C. § 230, this section may not apply to, and nothing in this section may be construed to impose liability or culpability on, an interactive computer service for content provided by another person.

    (d)  This section does not affect, limit, or apply to any activity or conduct that is protected by the constitution or laws of this state, or by the constitution or laws of the United States.

    (5) 

    (a)  An interactive computer service is not guilty of violating this section if an actor violates this section using the interactive computer service and the interactive computer service did not knowingly assist the actor to commit the violation.

    (b)  A service provider is not guilty of violating this section for:

    (i)  action taken in relation to a customer of the service provider, for a legitimate business purpose, to install software on, monitor, or interact with the customer’s Internet or other network connection, service, or computer for network or computer security purposes, authentication, diagnostics, technical support, maintenance, repair, network management, updates of computer software or system firmware, or remote system management; or

    (ii)  action taken, including scanning and removing computer software, to detect or prevent the following:

    (A)  unauthorized or fraudulent use of a network, service, or computer software;

    (B)  illegal activity; or

    (C)  infringement of intellectual property rights.

    Enacted by Chapter 111, 2023 General Session