Deletion of Data by Former Employee May Violate Computer Fraud and Abuse Act and Breach Duty of Loyalty

The Computer Fraud and Abuse Act prohibits the transmission of a program, information, code or command, which as a result, intentionally causes damage to a protected computer. The Act was designed to address, for example, attacks by virus and worm writers, as well as disgruntled programmers who intentionally damage an employer’s data system. An employer sued its former employee under the Act for deleting data and evidence of improper conduct during employment from a laptop computer furnished by the employer. The former employee argued that no claim could be stated because he merely deleted data on his laptop and did not engage in “transmission” of a program or command, which is an essential element under the Act. 

The appellate court rejected the former employee’s argument and allowed the employer’s lawsuit to proceed. Specifically, the court found that “transmission” does not require a program or command to be sent remotely, as opposed to from the drive of the computer where the data or information was deleted. Furthermore, after the employee engaged in misconduct and decided to quit employment, his actions to destroy files on the laptop violated his duty of loyalty which then terminated his agency relationship with his employer and his authority to access the laptop. By accessing a computer without authorization to destroy files, the employee could also be liable for violating another provision of the Act that prohibits unauthorized access that causes damage.  International Airport Centers, LLC v. Citrin, (7th Cir. 2006)