Comprehensive Computer Data Access and Fraud Act
CDAFA (Penal Code 502)
Data security · Other
California's computer crime law. It makes it a crime to knowingly access and, without permission, take, copy, use, alter, or delete data or use computer services, and gives owners of the affected computers or data a civil claim for damage or loss.
- Where
- California
- Citation
- Cal. Penal Code 502
- Status
- In force
- Last amended
- 2020-01-01
- Enforced by
- Prosecutors (criminal); owners or lessees of computers or data (civil)
- People can sue
- Yes
- Penalties
- Criminal fines and imprisonment by offense; the owner or lessee who suffers damage or loss may sue for compensatory damages, injunctive relief, and attorney's fees (502(e)).
- Applies to
- Any person who knowingly accesses computers, networks, or data without permission; frequently pleaded alongside CIPA in suits over online data collection
Practices it requires
- Do not knowingly access and without permission take, copy, or make use of data from a computer, system, or network.Cal. Penal Code 502(c)(2)
- Do not knowingly access and without permission alter, damage, delete, or use data or systems to defraud, deceive, or extort, or use computer services without permission.Cal. Penal Code 502(c)(1), (3)
Sources
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: Enactment year not determined; last_amended from leginfo note (Stats. 2019, Ch. 16, AB 814).
Research reference, not legal advice.