Deleting data violates law
By David Ziemer
Wisconsin Law Journal
March 15, 2006
What the court held
Case: International Airport Centers, L.L.C., v. Citrin, No. 05-1522.
Issue: Does an employee violate the Computer Fraud and Abuse Act by erasing all the data from a laptop loaned to him by his employer?
Holding: Yes. Using a secure-erasure program is a "transmission" that damages the computer, and is thus, within the ambit of the Act.
The Computer Fraud and Abuse Act’s (CFAA) prohibition on transmitting a program, in order to damage a computer, includes erasing all the data from a laptop.
The Seventh Circuit’s Mar. 8 opinion also held it doesn’t matter whether the perpetrator has physical access to the computer or damages it from a remote location.
According to the complaint, Jacob Citrin was employed by International Airport Centers, L.L.C. (IAC), a real estate company, to identify properties that IAC might want to acquire, and to assist in any ensuing acquisition. IAC lent Citrin a laptop for his use.
Citrin decided to quit IAC and go into business for himself, in breach of his employment contract. Before returning the laptop, however, he deleted all the data in it, including data that purportedly would have revealed improper conduct on his part to IAC.