Computer Crimes

Va. Code ยงยง 18.2-152.1 - 18.2-152.16; 18.2-374, 18.2-374.1


ยง 18.2-152.1. Short title.

ยง 18.2-152.2. Definitions; computer crimes.

For purposes of this article:

"Commercial electronic mail" means electronic mail, the primary purpose of which is the advertisement or promotion of a commercial product or service.

"Computer" means a device that accepts information in digital or similar form and manipulates it for a result based on a sequence of instructions. Such term does not include simple calculators, automated typewriters, facsimile machines, or any other specialized computing devices that are preprogrammed to perform a narrow range of functions with minimal end-user or operator intervention and are dedicated to a specific task.

"Computer data" means any representation of information, knowledge, facts, concepts, or instructions which is being prepared or has been prepared and is intended to be processed, is being processed, or has been processed in a computer or computer network. "Computer data" may be in any form, whether readable only by a computer or only by a human or by either, including, but not limited to, computer printouts, magnetic storage media, punched cards, or stored internally in the memory of the computer.

"Computer network" means two or more computers connected by a network.

"Computer operation" means arithmetic, logical, monitoring, storage or retrieval functions and any combination thereof, and includes, but is not limited to, communication with, storage of data to, or retrieval of data from any device or human hand manipulation of electronic or magnetic impulses. A "computer operation" for a particular computer may also be any function for which that computer was generally designed.

"Computer program" means an ordered set of data representing coded instructions or statements that, when executed by a computer, causes the computer to perform one or more computer operations.

"Computer services" means computer time or services, including data processing services, Internet services, electronic mail services, electronic message services, or information or data stored in connection therewith.

"Computer software" means a set of computer programs, procedures and associated documentation concerned with computer data or with the operation of a computer, computer program, or computer network.

"Electronic mail service provider" (EMSP) means any person who (i) is an intermediary in sending or receiving electronic mail and (ii) provides to end-users of electronic mail services the ability to send or receive electronic mail.

"Financial instrument" includes, but is not limited to, any check, draft, warrant, money order, note, certificate of deposit, letter of credit, bill of exchange, credit or debit card, transaction authorization mechanism, marketable security, or any computerized representation thereof.

"Network" means any combination of digital transmission facilities and packet switches, routers, and similar equipment interconnected to enable the exchange of computer data.

"Owner" means an owner or lessee of a computer or a computer network or an owner, lessee, or licensee of computer data, computer programs or computer software.

"Person" shall include any individual, partnership, association, corporation or joint venture.

"Property" shall include:

1. Real property;

2. Computers and computer networks;

3. Financial instruments, computer data, computer programs, computer software and all other personal property regardless of whether they are:

a. Tangible or intangible;

b. In a format readable by humans or by a computer;

c. In transit between computers or within a computer network or between any devices which comprise a computer; or

d. Located on any paper or in any device on which it is stored by a computer or by a human; and

4. Computer services.

"Spam" means unsolicited commercial electronic mail. Spam shall not include commercial electronic mail transmitted to a recipient with whom the sender has an existing business or personal relationship.

A person "uses" a computer or computer network when he attempts to cause or causes a computer or computer network to perform or to stop performing computer operations.

A person is "without authority" when he knows or reasonably should know that he has no right, agreement, or permission or acts in a manner knowingly exceeding such right, agreement, or permission.

ยง 18.2-152.3. Computer fraud; penalty.

Any person who uses a computer or computer network, without authority and:

1. Obtains property or services by false pretenses;

2. Embezzles or commits larceny; or

3. Converts the property of another;

is guilty of the crime of computer fraud.

If the value of the property or services obtained is $200 or more, the crime of computer fraud shall be punishable as a Class 5 felony. Where the value of the property or services obtained is less than $200, the crime of computer fraud shall be punishable as a Class 1 misdemeanor.

ยง 18.2-152.4. Computer trespass; penalty.

A. It shall be unlawful for any person, with malicious intent, to:

1. Temporarily or permanently remove, halt, or otherwise disable any computer data, computer programs or computer software from a computer or computer network;

2. Cause a computer to malfunction, regardless of how long the malfunction persists;

3. Alter, disable, or erase any computer data, computer programs or computer software;

4. Effect the creation or alteration of a financial instrument or of an electronic transfer of funds;

5. Use a computer or computer network to cause physical injury to the property of another;

6. Use a computer or computer network to make or cause to be made an unauthorized copy, in any form, including, but not limited to, any printed or electronic form of computer data, computer programs or computer software residing in, communicated by, or produced by a computer or computer network;

7. [Repealed.]

8. Install or cause to be installed, or collect information through, computer software that records all or a majority of the keystrokes made on the computer of another without the computer owner's authorization; or

9. Install or cause to be installed on the computer of another, computer software for the purpose of (i) taking control of that computer so that it can cause damage to another computer or (ii) disabling or disrupting the ability of the computer to share or transmit instructions or data to other computers or to any related computer equipment or devices, including but not limited to printers, scanners, or fax machines.

B. Any person who violates this section is guilty of computer trespass, which shall be a Class 1 misdemeanor. If there is damage to the property of another valued at $1,000 or more caused by such person's act in violation of this section, the offense shall be a Class 6 felony. If a person installs or causes to be installed computer software in violation of this section on more than five computers of another, the offense shall be a Class 6 felony. If a person violates subdivision A 8, the offense shall be a Class 6 felony.

C. Nothing in this section shall be construed to interfere with or prohibit terms or conditions in a contract or license related to computers, computer data, computer networks, computer operations, computer programs, computer services, or computer software or to create any liability by reason of terms or conditions adopted by, or technical measures implemented by, a Virginia-based electronic mail service provider to prevent the transmission of unsolicited electronic mail in violation of this article. Nothing in this section shall be construed to prohibit the monitoring of computer usage of, the otherwise lawful copying of data of, or the denial of computer or Internet access to a minor by a parent or legal guardian of the minor.

ยง 18.2-152.5. Computer invasion of privacy; penalties.

A. A person is guilty of the crime of computer invasion of privacy when he uses a computer or computer network and intentionally examines without authority any employment, salary, credit or any other financial or identifying information, as defined in clauses (iii) through (xiii) of subsection C of ยง 18.2-186.3, relating to any other person. "Examination" under this section requires the offender to review the information relating to any other person after the time at which the offender knows or should know that he is without authority to view the information displayed.

B. The crime of computer invasion of privacy shall be punishable as a Class 1 misdemeanor.

C. Any person who violates this section after having been previously convicted of a violation of this section or any substantially similar laws of any other state or of the United States is guilty of a Class 6 felony.

D. Any person who violates this section and sells or distributes such information to another is guilty of a Class 6 felony.

E. Any person who violates this section and uses such information in the commission of another crime is guilty of a Class 6 felony.

F. This section shall not apply to any person collecting information that is reasonably needed to (i) protect the security of a computer, computer service, or computer business, or to facilitate diagnostics or repair in connection with such computer, computer service, or computer business or (ii) determine whether the computer user is licensed or authorized to use specific computer software or a specific computer service.

ยง 18.2-152.6. Theft of computer services; penalties.

Any person who willfully obtains computer services without authority is guilty of the crime of theft of computer services, which shall be punishable as a Class 1 misdemeanor. If the theft of computer services is valued at $2,500 or more, he is guilty of a Class 6 felony.

ยง 18.2-152.7. Personal trespass by computer; penalty.

A. A person is guilty of the crime of personal trespass by computer when he uses a computer or computer network to cause physical injury to an individual.

B. If committed maliciously, the crime of personal trespass by computer shall be punishable as a Class 3 felony. If such act is done unlawfully but not maliciously, the crime of personal trespass by computer shall be punishable as a Class 6 felony.

ยง 18.2-152.8. Property capable of embezzlement.

For purposes of ยงยง 18.2-95, 18.2-96, 18.2-108, and 18.2-111, personal property subject to embezzlement, larceny, or receiving stolen goods shall include:

1. Computers and computer networks;

2. Financial instruments, computer data, computer programs, computer software and all other personal property regardless of whether they are:

a. Tangible or intangible;

b. In a format readable by humans or by a computer;

c. In transit between computers or within a computer network or between any devices which comprise a computer; or

d. Located on any paper or in any device on which it is stored by a computer or by a human; and

3. Computer services.

ยงยง 18.2-152.9. , 18.2-152.10.

ยง 18.2-152.11. Article not exclusive.

The provisions of this article shall not be construed to preclude the applicability of any other provision of the criminal law of this Commonwealth which presently applies or may in the future apply to any transaction or course of conduct which violates this article, unless such provision is clearly inconsistent with the terms of this article.

ยง 18.2-152.12. Civil relief; damages.

A. Any person whose property or person is injured by reason of a violation of any provision of this article or by any act of computer trespass set forth in subdivisions A 1 through A 8 of ยง 18.2-152.4 regardless of whether such act is committed with malicious intent may sue therefor and recover for any damages sustained and the costs of suit. Without limiting the generality of the term, "damages" shall include loss of profits.

B. If the injury under this article arises from the transmission of spam in contravention of the authority granted by or in violation of the policies set by the electronic mail service provider where the defendant has knowledge of the authority or policies of the EMSP or where the authority or policies of the EMSP are available on the electronic mail service provider's website, the injured person, other than an electronic mail service provider, may also recover attorneys' fees and costs, and may elect, in lieu of actual damages, to recover the lesser of $10 for each and every spam message transmitted in violation of this article, or $25,000 per day. The injured person shall not have a cause of action against the electronic mail service provider that merely transmits the spam over its computer network. Transmission of electronic mail from an organization to its members shall not be deemed to be spam.

C. If the injury under this article arises from the transmission of spam in contravention of the authority granted by or in violation of the policies set by the electronic mail service provider where the defendant has knowledge of the authority or policies of the EMSP or where the authority or policies of the EMSP are available on the electronic mail service provider's website, an injured electronic mail service provider may also recover attorneys' fees and costs, and may elect, in lieu of actual damages, to recover $1 for each and every intended recipient of a spam message where the intended recipient is an end user of the EMSP or $25,000 for each day an attempt is made to transmit a spam message to an end user of the EMSP. In calculating the statutory damages under this provision, the court may adjust the amount awarded as necessary, but in doing so shall take into account the number of complaints to the EMSP generated by the defendant's messages, the defendant's degree of culpability, the defendant's prior history of such conduct, and the extent of economic gain resulting from the conduct. Transmission of electronic mail from an organization to its members shall not be deemed to be spam.

D. At the request of any party to an action brought pursuant to this section, the court may, in its discretion, conduct all legal proceedings in such a way as to protect the secrecy and security of the computer, computer network, computer data, computer program and computer software involved in order to prevent possible recurrence of the same or a similar act by another person and to protect any trade secrets of any party and in such a way as to protect the privacy of nonparties who complain about violations of this section.

E. The provisions of this article shall not be construed to limit any person's right to pursue any additional civil remedy otherwise allowed by law.

F. A civil action under this section must be commenced before expiration of the time period prescribed in ยง 8.01-40.1. In actions alleging injury arising from the transmission of spam, personal jurisdiction may be exercised pursuant to ยง 8.01-328.1.

ยง 18.2-152.13. Severability.

If any provision or clause of this article or application thereof to any person or circumstances is held to be invalid, such invalidity shall not affect other provisions or applications of this article which can be given effect without the invalid provision or application, and to this end the provisions of this article are declared to be severable.

ยง 18.2-152.14. Computer as instrument of forgery.

The creation, alteration, or deletion of any computer data contained in any computer or computer network, which if done on a tangible document or instrument would constitute forgery under Article 1 (ยง 18.2-168 et seq.) of Chapter 6 of this Title, will also be deemed to be forgery. The absence of a tangible writing directly created or altered by the offender shall not be a defense to any crime set forth in Article 1 (ยง 18.2-168 et seq.) of Chapter 6 of this Title if a creation, alteration, or deletion of computer data was involved in lieu of a tangible document or instrument.

ยง 18.2-152.15. Encryption used in criminal activity.

Any person who willfully uses encryption to further any criminal activity shall be guilty of an offense which is separate and distinct from the predicate criminal activity and punishable as a Class 1 misdemeanor.

"Encryption" means the enciphering of intelligible data into unintelligible form or the deciphering of unintelligible data into intelligible form.

This article shall be known and may be cited as the "Virginia Computer Crimes Act."


ยง 18.2-152.16.
ยง 18.2-374. Production, publication, sale, possession, etc., of obscene items.
It shall be unlawful for any person knowingly to:

(1) Prepare any obscene item for the purposes of sale or distribution; or

(2) Print, copy, manufacture, produce, or reproduce any obscene item for purposes of sale or distribution; or

(3) Publish, sell, rent, lend, transport in intrastate commerce, or distribute or exhibit any obscene item, or offer to do any of these things; or

(4) Have in his possession with intent to sell, rent, lend, transport, or distribute any obscene item. Possession in public or in a public place of any obscene item as defined in this article shall be deemed prima facie evidence of a violation of this section.

For the purposes of this section, "distribute" shall mean delivery in person, by mail, messenger or by any other means by which obscene items as defined in this article may pass from one person, firm or corporation to another.

ยง 18.2-374.1. Production, publication, sale, financing, etc., of child pornography; presumption as to age; severability.

A. For purposes of this article and Article 4 (ยง 18.2-362 et seq.) of this chapter, "child pornography" means sexually explicit visual material which utilizes or has as a subject an identifiable minor. An identifiable minor is a person who was a minor at the time the visual depiction was created, adapted, or modified; or whose image as a minor was used in creating, adapting or modifying the visual depiction; and who is recognizable as an actual person by the person's face, likeness, or other distinguishing characteristic, such as a unique birthmark or other recognizable feature; and shall not be construed to require proof of the actual identity of the identifiable minor.

For the purposes of this article and Article 4 (ยง 18.2-362 et seq.) of this chapter, the term "sexually explicit visual material" means a picture, photograph, drawing, sculpture, motion picture film, digital image, including such material stored in a computer's temporary Internet cache when three or more images or streaming videos are present, or similar visual representation which depicts sexual bestiality, a lewd exhibition of nudity, as nudity is defined in ยง 18.2-390, or sexual excitement, sexual conduct or sadomasochistic abuse, as also defined in ยง 18.2-390, or a book, magazine or pamphlet which contains such a visual representation. An undeveloped photograph or similar visual material may be sexually explicit material notwithstanding that processing or other acts may be required to make its sexually explicit content apparent.

B. A person shall be guilty of production of child pornography who:

1. Accosts, entices or solicits a person less than 18 years of age with intent to induce or force such person to perform in or be a subject of child pornography; or

2. Produces or makes or attempts or prepares to produce or make child pornography; or

3. Who knowingly takes part in or participates in the filming, photographing, or other production of child pornography by any means; or

4. Knowingly finances or attempts or prepares to finance child pornography.

5. [Repealed.]

B1. [Repealed.]

C1. Any person who violates this section, when the subject of the child pornography is a child less than 15 years of age, shall be punished by not less than five years nor more than 30 years in a state correctional facility. However, if the person is at least seven years older than the subject of the child pornography the person shall be punished by a term of imprisonment of not less than five years nor more than 30 years in a state correctional facility, five years of which shall be a mandatory minimum term of imprisonment. Any person who commits a second or subsequent violation of this section where the person is at least seven years older than the subject shall be punished by a term of imprisonment of not less than 15 years nor more than 40 years, 15 years of which shall be a mandatory minimum term of imprisonment.

C2. Any person who violates this section, when the subject of the child pornography is a person at least 15 but less than 18 years of age, shall be punished by not less than one year nor more than 20 years in a state correctional facility. However, if the person is at least seven years older than the subject of the child pornography the person shall be punished by term of imprisonment of not less than three years nor more than 30 years in a state correctional facility, three years of which shall be a mandatory minimum term of imprisonment. Any person who commits a second or subsequent violation of this section when he is at least seven years older than the subject shall be punished by a term of imprisonment of not less than 10 years nor more than 30 years, 10 years of which shall be a mandatory minimum term of imprisonment.

D. For the purposes of this section it may be inferred by text, title or appearance that a person who is depicted as or presents the appearance of being less than 18 years of age in sexually explicit visual material is less than 18 years of age.

E. Venue for a prosecution under this section may lie in the jurisdiction where the unlawful act occurs or where any sexually explicit visual material associated with a violation of this section is produced, reproduced, found, stored, or possessed.

F. The provisions of this section shall be severable and, if any of its provisions shall be held unconstitutional by a court of competent jurisdiction, then the decision of such court shall not affect or impair any of the remaining provisions.