Crime of unauthorized computer access expanded to include accessing a computer without penetrating security system.
Summary
HF2630 expands Minnesota’s unauthorized computer access law to cover a new form of access: intentionally and without authorization accessing an unsecured computer that contains personal data, even if the person does not penetrate a security system. Under current law, the offense focuses on penetrating a computer security system or an electronic terminal; this bill adds a third prohibited act and keeps the existing framework for unauthorized access to terminals and secured systems.
The bill also preserves and extends the existing penalty structure. Unauthorized access can still be charged as a misdemeanor, gross misdemeanor, or felony depending on the circumstances, including whether the conduct creates a risk to public health and safety, compromises protected or nonpublic data, results in access to personal data, involves repeat offenses, or is done by tampering with an electronic terminal. The bill is effective August 1, 2025, and applies only to crimes committed on or after that date.
Impact
This bill amends Minnesota Statutes section 609.891 by broadening the definition of unauthorized computer access and adding a new basis for criminal liability involving unsecured computers containing personal data. It does not create a new standalone offense category, but it expands the conduct that can be prosecuted under the existing unauthorized computer access statute and leaves the current misdemeanor, gross misdemeanor, and felony penalties in place. The practical effect is to give law enforcement and prosecutors additional authority to charge unauthorized access even when no security system was bypassed.
Sentiment
Based on the bill text and the absence of recorded committee debate or votes in the provided materials, the bill appears to be a straightforward public-safety and data-protection measure with no documented opposition in the record supplied. Its framing suggests a policy goal of closing a gap in the law to better address unauthorized access to computers holding personal data. Because no transcripts or vote history were provided, there is no evidence here of broader controversy or divided sentiment.
Contention
The main policy issue raised by the bill’s language is the expansion of criminal liability to cover access to an unsecured computer containing personal data, which could prompt questions about how broadly “access” and “personal data” are interpreted and whether the statute could reach lower-level conduct that previously fell outside the law. Another possible point of concern is whether the new clause overlaps with existing data-security and theft-related offenses. No specific legislators, witnesses, or stakeholder groups are identified in the provided record as supporting or opposing these changes.
Redefines the term "following" for a crime of stalking in the fourth degree to include the use of certain devices or computers to gain access to, record, track or report the movement or location of a person or their property without the person's permission or authority to do so.
Payment rates established for certain substance use disorder treatment services, and vendor eligibility recodified for payments from the behavioral health fund.
Cover Outstanding Vulnerable Expansion-eligible Residents Now Act or the COVER Now Act This bill establishes a demonstration program to allow local governments to provide health benefits to the Medicaid expansion population in states that have not expanded Medicaid. Under the program, local governments may provide coverage for individuals who are newly eligible for Medicaid under the Patient Protection and Affordable Care Act (i.e., the Medicaid expansion population) for a maximum of 10 years, or until their respective states expand Medicaid. The bill provides a 100% federal matching rate for the first three years of program participation. The bill prohibits states from taking certain actions against participating localities, such as withholding funding, increasing taxes, or restricting provider participation. States that violate these requirements are subject to certain funding penalties.