Computer Misuse Act 1990 (CMA)
Definition
The primary UK statute creating offences of unauthorised access to computer material, unauthorised access with intent to commit further offences, and unauthorised modification of computer material. Amended by the Police and Justice Act 2006 and the Serious Crime Act 2015 to add denial-of-service and article-for-use offences.
- Jurisdiction
- United Kingdom
- Enacted
- 1990
- Core offences
- Unauthorised access, access with further intent, unauthorised modification
- Amended by
- Police and Justice Act 2006, Serious Crime Act 2015
Common questions
What new offences did the Police and Justice Act 2006 and Serious Crime Act 2015 add to the original CMA?+
The 2006 Act added a denial-of-service offence covering impairment of computer operation, and criminalised making, supplying or obtaining articles for use in CMA offences. The 2015 Act went further and added an offence for unauthorised acts causing, or creating risk of, serious damage, with enhanced penalties where critical infrastructure or human welfare is threatened.
Does the Computer Misuse Act apply to conduct carried out from outside the UK?+
Yes, the Act includes provisions extending jurisdiction to conduct where either the accused or the affected computer has a significant link to the UK, allowing prosecution of offences committed abroad against UK-based systems or by UK-linked offenders acting against foreign systems.
Related terms
- Budapest Convention
- The Council of Europe Convention on Cybercrime (2001), the first binding international treaty on cyber offences. Requires signatory states to criminalise illegal...
- Chain of Custody
- The documented chronological record of who collected, handled, transferred, and examined a piece of evidence. For digital evidence, chain of custody includes...
- Computer Fraud and Abuse Act (CFAA)
- 18 U.S.C. § 1030, the primary US federal computer crime statute. Criminalises unauthorised access to protected computers, data theft, system damage, and...
- Hash Value
- A fixed-length digital fingerprint produced by running a file through a cryptographic algorithm such as SHA-256 or MD5. Identical files produce identical...
- Section 65B Certificate (Now BSA 2023 Certificate)
- A statutory certificate required under Indian law to authenticate electronic records tendered in evidence. Under the Bharatiya Sakshya Adhiniyam 2023, the certificate...