That there is no legal definition of &quot;authorized access&quot; is the problem with the CFAA. One could argue that if the website is sending the data to your computer, you&#x27;re authorized to access it, and that&#x27;s the end of it. That&#x27;d definitely be the most favorable interpretation for the tech community. Unfortunately, in many cases, extrapolations like those you&#x27;ve invoked are used instead: &quot;He knew he wasn&#x27;t supposed to have it&quot;, &quot;we told him to go away&quot;, etc.