DOJ Issues Guidance On Private Sector Intelligence Gathering Activities On The Dark Web

Earlier this year, the Cybersecurity Unit ("CsU") of the Computer Crime and Intellectual Property Section of the United States Department of Justice released guidance for the private sector entitled "Legal Considerations when Gathering Online Cyber Threat Intelligence and Purchasing Data from Illicit Sources."  The Guidance (available here) is intended to aid private actors to assess the potential legal exposure under federal criminal law as a result of engaging in common cyber intelligence-gathering activities on the dark web.  Focusing on activity on TOR-based Dark Markets, i.e., "online forums in which computer crimes are discussed and planned and stolen data is bought and sold," CsU offers practical tips and best practices for legitimate private actors to reduce the risk of liability and other negative repercussions under federal law.¹