48 7.3.3 Most governments find that a combination of approaches will be necessary to effectively combat cyber-crime. The provisions in modern penal legislation generally provide sufficient safeguards against traditional crimes, such as theft or fraud, committed with the aid of a computer. While the e-legislation initiative may provide an opportunity to update certain provisions in the Penal Code, it is likely that the theft and fraud provisions are adequate. Computers and electronic communication, however, present particular problems with respect to investigation and the gathering of evidence, especially in an era of rapidly changing technology. Traditional investigative techniques relied heavily on paper documents and pre-digital telecommunication. These issues will be discussed in further detail below with respect to “lawful access.” 7.3.4 Traditional criminal law concepts (including underlying concepts of “property” and “value”) may need adjustments, however. The law may not recognise that a particular configuration or arrangement of electromagnetic impulses is corporeal and capable of being destroyed. In fact, it may have considerable value that is not recognised simply by recognising the lost value of a computer that has been destroyed or tampered with. It may be necessary to amend legislation to recognise the value of data. For example, the Canadian Criminal Code45 was amended in 1985 to create an offence of mischief in relation to data where a person wilfully and without colour of right or lawful excuse alters or destroys data or renders it useless, meaningless or ineffective or interferes with its lawful use or access. The provision also covers the alteration of data or “denial of service,” where the objective is to disable a target system rather than necessarily gain access to it. Such a legislative provision probably could also be used to deal with the introduction of a virus into a system or network, but more explicit legislation may be desirable. The federal Computer Fraud and Abuse Act 46in the United States protects computers that “facilitate interstate and international commerce and communications.”47 For example, it is a crime to access a computer without or in excess of authority to obtain financial information from a financial institution or any information in the possession of the government. Similarly, the Act creates a crime to knowingly cause the transmission of a computer program, information, 45 R S.C. 1985, c. C-46, as amended, s. 430. Part of the importance of this provision hinges on the statutory definition of “property” in the provisions dealing with crimes against property. 46 18 U.S.C. ss. 1030. 47 Because of constitutional limitations, much of the American cyber-crime legislation is found at the state level; see, Susan W. Brenner, “State Cybercrime Legislation in the United States of America: A Survey,” (2001) VII Richmond Journal of Law and Technology 28 at www.richmond.edu/jolt/v7i3/article2.html

Select target paragraph3