United States Supreme Court
A person "exceeds authorized access" under the Computer Fraud and Abuse Act only when they obtain information from areas of a computer system to which they lack access permission, not when they misuse authorized access.
Van Buren v. United States narrowed the scope of the Computer Fraud and Abuse Act, holding that a police officer who accessed a law enforcement database for an improper purpose did not "exceed authorized access" under the Act because he had permission to access the database.