Crime of unauthorized computer access expansion to include accessing a computer without penetrating a security system
Summary
SF703 expands Minnesota’s unauthorized computer access law to cover a new category of conduct: intentionally and without authorization accessing an unsecured computer that contains personal data, even if the person does not penetrate a security system or electronic terminal. Under current law as amended by the bill, unauthorized access remains a crime when a person penetrates a computer security system or an electronic terminal, but the bill adds unsecured computers with personal data to the core offense definition.
The bill also revises the penalty structure to apply to the new offense and to existing unauthorized-access conduct. It preserves felony treatment for the most serious conduct, including acts creating a grave risk of death, repeat gross misdemeanor violations, and certain unauthorized access to electronic terminals involving opening panels or attaching devices to capture access-device information. It creates gross misdemeanor liability for conduct that creates a risk to public health and safety, compromises protected or nonpublic data, or results in access to personal data, and it retains misdemeanor treatment for other violations. The bill takes effect August 1, 2025, and applies only to crimes committed on or after that date.
Impact
SF703 amends Minnesota Statutes section 609.891 by broadening the scope of unauthorized computer access to include unauthorized access to unsecured computers containing personal data. This change would extend criminal liability beyond hacking that defeats security measures and would potentially reach a wider range of intrusions into systems that are not protected by a security barrier but still store sensitive information. The bill also aligns penalties with the expanded offense, affecting prosecutors, defendants, and entities that store personal data on unsecured systems.
Sentiment
The available record shows little direct debate, testimony, or recorded voting history, so there is no clear evidence of organized support or opposition in the materials provided. Based on the bill’s caption and structure, the measure appears aimed at strengthening public-safety and data-protection enforcement, which suggests a generally protective policy posture. However, without committee discussion or votes, the overall sentiment can only be characterized as neutral to likely favorable toward closing a perceived gap in the law.
Contention
The main point of potential contention is the bill’s expansion of criminal liability to access of an unsecured computer containing personal data, which could be viewed as broadening the reach of the criminal code beyond traditional hacking scenarios. Supporters would likely emphasize the need to protect personal data and address unauthorized access even when no security system is bypassed, while critics may worry about overcriminalization, ambiguity around what counts as “unsecured,” and whether the penalty tiers are proportionate. Another possible issue is the bill’s treatment of access to personal data and nonpublic data as gross misdemeanors, which may raise concerns about how broadly those categories are applied.
Redefines the term "following" for a crime of stalking in the fourth degree to include the use of certain devices or computers to gain access to, record, track or report the movement or location of a person or their property without the person's permission or authority to do so.
Payment rates established for certain substance use disorder treatment services, and vendor eligibility recodified for payments from the behavioral health fund.
Cover Outstanding Vulnerable Expansion-eligible Residents Now Act or the COVER Now Act This bill establishes a demonstration program to allow local governments to provide health benefits to the Medicaid expansion population in states that have not expanded Medicaid. Under the program, local governments may provide coverage for individuals who are newly eligible for Medicaid under the Patient Protection and Affordable Care Act (i.e., the Medicaid expansion population) for a maximum of 10 years, or until their respective states expand Medicaid. The bill provides a 100% federal matching rate for the first three years of program participation. The bill prohibits states from taking certain actions against participating localities, such as withholding funding, increasing taxes, or restricting provider participation. States that violate these requirements are subject to certain funding penalties.