HB2053 97TH GENERAL ASSEMBLY

LRB097 02970 RLC 42995 b

97TH GENERAL ASSEMBLY
State of Illinois
2011 and 2012
HB2053

Introduced , by Rep. Darlene J. Senger

SYNOPSIS AS INTRODUCED:

720 ILCS 5/16D-2	from Ch. 38, par. 16D-2
720 ILCS 5/16D-3	from Ch. 38, par. 16D-3

Amends the Criminal Code of 1961. Provides that a person commits the offense of computer tampering when knowingly, and without the authorization of a computer's owner, engages in electronic hi-jacking, or sends false data such as information, pictures, or videos as the owner of a hi-jacked account. Defines electronic hi-jacking as a network security attack in which the attacker takes unauthorized control of electronic communications, social networking sites, computer networks or programs of another. Provides that a first offense is a Class 4 felony and a second or subsequent offense is a Class 3 felony.

A BILL FOR

AN ACT concerning criminal law.

Be it enacted by the People of the State of Illinois, represented in the General Assembly:

Section 5. The Criminal Code of 1961 is amended by changing Sections 16D-2 and 16D-3 as follows:

(720 ILCS 5/16D-2) (from Ch. 38, par. 16D-2)

Sec. 16D-2. Definitions. As used in this Article, unless the context otherwise indicates:

(a) "Computer" means a device that accepts, processes, stores, retrieves or outputs data, and includes but is not limited to auxiliary storage and telecommunications devices connected to computers.

(a-5) "Computer network" means a set of related, remotely connected devices and any communications facilities including more than one computer with the capability to transmit data among them through the communications facilities.

(b) "Computer program" or "program" means a series of coded instructions or statements in a form acceptable to a computer which causes the computer to process data and supply the results of the data processing.

(b-5) "Computer services" means computer time or services, including data processing services, Internet services, electronic mail services, electronic message services, or information or data stored in connection therewith.

(c) "Data" means a representation of information, knowledge, facts, concepts or instructions, including program documentation, which is prepared in a formalized manner and is stored or processed in or transmitted by a computer. Data shall be considered property and may be in any form including but not limited to printouts, magnetic or optical storage media, punch cards or data stored internally in the memory of the computer.

(c-5) "Electronic mail service provider" means any person who (1) is an intermediary in sending or receiving electronic mail and (2) provides to end-users of electronic mail services the ability to send or receive electronic mail.

(d) In addition to its meaning as defined in Section 15-1 of this Code, "property" means: (1) electronic impulses; (2) electronically produced data; (3) confidential, copyrighted, or proprietary information; (4) private identification codes or numbers which permit access to a computer by authorized computer users or generate billings to consumers for purchase of goods and services, including but not limited to credit card transactions and telecommunications services or permit electronic fund transfers; (5) software or programs in either machine or human readable form; or (6) any other tangible or intangible item relating to a computer or any part thereof.

(e) "Access" means to use, instruct, communicate with, store data in, retrieve or intercept data from, or otherwise utilize any services of a computer.

(f) "Services" includes but is not limited to computer time, data manipulation, or storage functions.

(g) "Vital services or operations" means those services or operations required to provide, operate, maintain, and repair network cabling, transmission, distribution, or computer facilities necessary to ensure or protect the public health, safety, or welfare. Those services or operations include, but are not limited to, services provided by medical personnel or institutions, fire departments, emergency services agencies, national defense contractors, armed forces or militia personnel, private and public utility companies, or law enforcement agencies.

(h) "Social networking website" means an Internet website containing profile web pages of the members of the website that include the names or nicknames of such members, photographs placed on the profile web pages by such members, or any other personal or personally identifying information about such members and links to other profile web pages on social networking websites of friends or associates of such members that can be accessed by other members or visitors to the website. A social networking website provides members of or visitors to such website the ability to leave messages or comments on the profile web page that are visible to all or some visitors to the profile web page and may also include a form of electronic mail for members of the social networking website.

(i) "Electronic hi-jacking" means a network security attack in which the attacker takes unauthorized control of electronic communications, social networking sites, computer networks or programs of another.

(Source: P.A. 96-262, eff. 1-1-10; 96-1000, eff. 7-2-10.)

(720 ILCS 5/16D-3) (from Ch. 38, par. 16D-3)

Sec. 16D-3. Computer Tampering.

(a) A person commits the offense of computer tampering when he knowingly and without the authorization of a computer's owner, as defined in Section 15-2 of this Code, or in excess of the authority granted to him:

(1) Accesses or causes to be accessed or electronically hi-jacks a computer or any part thereof, a computer network, electronic mail, social networking website, or a program or data;

(2) Accesses or causes to be accessed or electronically hi-jacks a computer or any part thereof, a computer network, electronic mail, social networking website, or a program or data, and obtains data or services;

(3) Accesses or causes to be accessed or electronically hi-jacks a computer or any part thereof, a computer network, electronic mail, social networking website, or a program or data, and damages or destroys the computer or alters, deletes or removes a computer program or data;

(4) Inserts or attempts to insert a "program" into a computer or computer program knowing or having reason to believe that such "program" contains information or commands that will or may damage or destroy that computer, or any other computer subsequently accessing or being accessed by that computer, or that will or may alter, delete or remove a computer program or data from that computer, or any other computer program or data in a computer subsequently accessing or being accessed by that computer, or that will or may cause loss to the users of that computer or the users of a computer which accesses or which is accessed by such "program"; or

(5) Falsifies or forges electronic mail transmission information or other routing information in any manner in connection with the transmission of unsolicited bulk electronic mail through or into the computer network of an electronic mail service provider or its subscribers; or .

(6) Accesses or causes to be accessed or electronically hi-jacks a computer or any part thereof, a computer network, electronic mail, social networking website, or a program or data, and transmits, sends, or posts false data such as information, pictures, or videos as the corresponding account or equipment owner.

(a-5) It shall be unlawful for any person knowingly to sell, give, or otherwise distribute or possess with the intent to sell, give, or distribute software which (1) is primarily designed or produced for the purpose of facilitating or enabling the falsification of electronic mail transmission information or other routing information; (2) has only a limited commercially significant purpose or use other than to facilitate or enable the falsification of electronic mail transmission information or other routing information; or (3) is marketed by that person or another acting in concert with that person with that person's knowledge for use in facilitating or enabling the falsification of electronic mail transmission information or other routing information.

(a-10) For purposes of subsection (a), accessing a computer network is deemed to be with the authorization of a computer's owner if:

(1) the owner authorizes patrons, customers, or guests to access the computer network and the person accessing the computer network is an authorized patron, customer, or guest and complies with all terms or conditions for use of the computer network that are imposed by the owner; or

(2) the owner authorizes the public to access the computer network and the person accessing the computer network complies with all terms or conditions for use of the computer network that are imposed by the owner.

(b) Sentence.

(1) A person who commits the offense of computer tampering as set forth in subsection (a)(1), (a)(5), or (a-5) of this Section shall be guilty of a Class B misdemeanor.

(2) A person who commits the offense of computer tampering as set forth in subsection (a)(2) of this Section shall be guilty of a Class A misdemeanor and a Class 4 felony for the second or subsequent offense.

(3) A person who commits the offense of computer tampering as set forth in subsection (a)(3), or subsection (a)(4), or (a)(6) of this Section shall be guilty of a Class 4 felony and a Class 3 felony for the second or subsequent offense.

(4) If the injury arises from the transmission of unsolicited bulk electronic mail, the injured person, other than an electronic mail service provider, may also recover attorney's fees and costs, and may elect, in lieu of actual damages, to recover the lesser of $10 for each and every unsolicited bulk electronic mail message transmitted in violation of this Section, or $25,000 per day. The injured person shall not have a cause of action against the electronic mail service provider that merely transmits the unsolicited bulk electronic mail over its computer network.

(5) If the injury arises from the transmission of unsolicited bulk electronic mail, an injured electronic mail service provider may also recover attorney's fees and costs, and may elect, in lieu of actual damages, to recover the greater of $10 for each and every unsolicited electronic mail advertisement transmitted in violation of this Section, or $25,000 per day.

(6) The provisions of this Section shall not be construed to limit any person's right to pursue any additional civil remedy otherwise allowed by law.

(c) Whoever suffers loss by reason of a violation of subsection (a)(4) of this Section may, in a civil action against the violator, obtain appropriate relief. In a civil action under this Section, the court may award to the prevailing party reasonable attorney's fees and other litigation expenses.

(Source: P.A. 95-326, eff. 1-1-08; 96-1000, eff. 7-2-10.)