What if I, as your employer, say "you're not authorized to look at records that haven't been assigned to you" and you then look at a record that hasn't been assigned to you - is that unauthorized access?

edit: I certainly don't agree that the distinction between access to a file in a file cabinet and a record on a computer should be significant. I think it's a dumb law. But the unauthorized access test is straightforward. If I work at a company that disallows internet browsing other than for work purposes and I visit my facebook page, I think that's a clear case of hacking under the "authorized access" test, and my only real defense would be that I needed to check facebook for work.