The Computer Fraud and Abuse Act was specifically geared towards the growing need for legislation in order to more specifically prosecute computer crimes. The Act decreed that any person who knowlingly took part in a scheme to steal, change, or destroy data concerning protected government systems for their personal advantage or to the advantage of a foreign power, or to the detriment of the United States, would be subject to prosecution. Also, if the person uses a computer to impede justice or the administration of justice they are subject to prosecution.

The Act also made it illegal for any person to access a "protected" system without authorization, or beyond the authorization that they have been alotted. A protected system is defined as any system used by a financial institution or the U.S. government. If by gaining access to a "protected" computer or system the person does cause harm, or damages the system in some way, they will also be subject to prosecution if the extent of the harm reached in excess of $5,000 dollars to the system, or related systems in the recourse of one year. However, it is vague as to when the dollar figure actually comes into play if nothing is actually stolen or destroyed. It is also illegal to attempt to extort any individual by means of a computer. The Act also protects medical records. Their theft, alteration, or destruction is a felony and falls under HIPPA.

The punishments for violating these laws vary greatly per the crime committed. Essentially, if a person commits an act against the United States government the penalty is a substantial fine and/or a prison sentence of up to 20 years in prison. If a person commits a crime against any other "protected" system then that person could be subject to fines and/or a prison sentence that could range from one to twenty years. It also allows for any individual or company to pursue compensatory action in civil court against any individual who has knowlingly harmed their property by electronic means. As long as the civil action has begun within two years of the discovery of the damage.

The Secret Service and the FBI were given authority over investigating computer crimes. Specifically the Secret Service was made responsible for investigating fraud or abuse that concerned the Executive Branch of the government. The FBI was responsible for everything else, in accordance with the Secretary of the Treasury, the Attorney General, and any state commision that may be involved.