Supposedly the Computer Fraud and Abuse Act.

http://en.wikipedia.org/wiki/Craigslist_v._3Taps