The Computer Fraud and Abuse Act prescribes penalties for either attempting or actually committing its offenses. The minimum penalties for each offense are only available to first-time offenders who are not convicted in conjunction with other offenses under the law. For multiple and repeat offenses, the law doubles the prescribed imprisonment time.

Besides these criminal penalties, the law specifically provides for civil lawsuits. Thus anyone who suffers damage or loss through a violation of the Computer Fraud and Abuse Act can bring suit against the violator and seek compensatory damages, court orders to end specific behavior, or other forms of re lief. Such lawsuits must be brought within two years of the date of the complaint or the date of the discovery of the damage.