Internet fraud law milestones, from CFAA to DSA

1986 set the federal baseline: CFAA targeted unauthorized computer access, and ECPA updated electronic-communications privacy.

Identity-theft law evolved twice: 1998 created the offense, and 2008 broadened CFAA protected-computer coverage.

In 2001, PATRIOT expanded CFAA coverage, and Budapest was adopted on 8 November and signed on 23 November.

CAN-SPAM made deceptive email a federal offense in 2003 through 18 U.S.C. § 1037.

The 2022 DSA targets platform duties, systemic-risk governance, and illegal-content and consumer-protection processes.