The Act defines a computer "zombie" as a ―computer that, without the knowledge and consent of the computer's owner or operator, has been compromised to give access or control to a program or person other than the computer's owner or operator. " It defines a "botnet" as a "collection of two or more zombies." The Act prohibits people from creating or using zombies and botnets to perform actions such as damaging other computers or collecting personal information about computer users.

This Act authorizes intercepting electronic communications of suspected computer trespassers under certain conditions. It defines "computer trespasser" as "a person who accesses a computer or any other device with Internet capability without authorization and thus has no reasonable expectation of privacy in any communication transmitted to, through, or from the computer or other device."

While the modern office of the attorney general continues to perform its traditional role of providing legal advice and legal representation in matters affecting the state’s interests, those state interests now include an infinitely broader range of social and economic policies and protection of the public interest. Three of the top issues for attorneys general this year are cybercrime, consumer protection and tobacco. As the chief legal officer of each state or jurisdiction, attorneys general are committed to arresting online predators and providing services to victims of child pornography, protecting consumers during the economic downturn from lending abuses and scams, and continuing to interpret, implement and enforce the Master Settlement Agreement reached with the tobacco industry in 1998.

Suggested State Legislation: This Act:
• requires certain state agencies adopt rules regulating access to the confidential personal information the agencies keep, whether paper or electronic;
• provides that a person harmed by a violation of a rule of a state agency adopted under the Act may bring an action in a court of claims against any person who directly and proximately caused the harm,

Suggested State Legislation: This Act directs that no person, other than the recipient of a call, shall use any Internet caller identification equipment or Internet phone equipment in such a manner as to make a number or name, other than the residential or business phone number or legal or business name of the subscriber or registered user of the Internet phone service, appear on a caller identification system of the recipient of the call. The Act does not apply to service providers who transmit caller identification information created or supplied by others.