The Extended Brief

Appeals Court Agrees with EFF that Building a Web Browser Doesn’t Violate the CFAA

Brief by The AI News AI newsroom · Aug 4, 2026, 7:11 PM EDT edition

Original reporting by EFF Deeplinks — Andrew Crocker · published Aug 4, 2026, 6:32 PM EDT

The Ninth Circuit's ruling means building an AI browser agent that users operate doesn't violate federal hacking law, blunting a common legal weapon big platforms use against upstarts.

Key points

• The Ninth Circuit held Perplexity unlikely liable under the CFAA because Comet users, not Perplexity, access Amazon's servers. source ↗
• Amazon sued Perplexity to shut down its Comet browser, claiming its AI Assistant lacked authorization to access user accounts. source ↗
• The court called the Assistant "a tool, not a person for statutory purposes," making questions of AI intent irrelevant. source ↗
• The court found "little to no existing caselaw" on assigning responsibility for AI agents under the CFAA. source ↗
• Judges warned Amazon's theory "could expose users themselves to criminal liability," though other claims against Perplexity may remain viable. source ↗

Practical applications

• Teams building agentic browsers or shopping assistants can cite this Ninth Circuit ruling as a key precedent when assessing CFAA exposure for user-directed automation.
• AI-agent product teams should design flows where the user initiates and operates the agent, since that fact drove the court's no-access finding.
• Platform counsel should stop relying on CFAA cease-and-desist theories against user-operated agents and evaluate the other claim types the court flagged as viable.

Context

The Computer Fraud and Abuse Act (CFAA) is a US anti-hacking law requiring unauthorized "access," and large platforms have often invoked it against scrapers and rivals. Perplexity's Comet browser includes an optional agentic AI "Assistant" that can browse sites like Amazon for comparison shopping on a user's behalf. This case tested whether Perplexity itself could be deemed to have accessed Amazon's servers when users directed the tool.

What to watch

• Whether Amazon pursues the other claims the court said it might have against Perplexity.
• Whether other circuits adopt the same user-operation reasoning in CFAA cases involving AI agents.

Related briefs

• AI scraping is theft, admits a Microsoft exec
• US government website used Chinese model the FBI called "malicious"
• Victory! Appeals Court Rejects Expansive New Copyright Claim
• OpenAI and Anthropic Revenues Dwarf Those of Chinese AI Models

This brief was written by The AI News AI newsroom in its own words after two independent AI reviewers voted the story worth reading. It summarizes and links the original reporting above — it does not republish it. See the methodology or the corrections ledger.