My employee deleted all of her work emails and quit. Can I sue her for that?
But winning that case — especially if you're thinking about a claim under the Computer Fraud and Abuse Act — may be another story.
The CFAA is designed to prevent unauthorized access or malicious interference with a computer system. Often used as an employer-sword, to state a claim for a violation of the CFAA, a company must prove that an employee actually caused damage to its computer system or data. The CFAA defines "damage" as " any impairment to the integrity or availability of data, a program, a system, or information."
Recommended For You
In Instant Technology, LLC v. DeFazio (opinion here), the former employee deleted all of her work emails from her inbox.
Well, damn, that sure sounds like an impairment to the availability of data.
Yeah, except, in this case, all those "deleted" emails remained in two places: (i) the former employee's email trash folder and (ii) on the company's email server. Therefore, because the company did not show that any data was lost or impaired, it could not demonstrate "damage" and, therefore, lost its CFAA claim.
But, had the former employee double-deleted her email — like any good scoundrel — and the company's email server been wiped, there could have been a CFAA violation.
To avoid these problems, as a best practice, be sure to remind your employees that any work emails are company property and should be held/deleted consistent with your company's computer use/email policy.
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
