Five years after CAN-SPAM did nothing to prevent Internet spam, Congress is ready to consider a similarly useful anti-spyware act.
the CSA states that it’s illegal to steal someone’s personal identification information off of their computer either via direct physical access or through a third-party program. It should be noted, however, that all of these things are already illegal under federal and state law
I just quoted since I couldn’t have said this better myself. Original article here
In the end, this ACT seems that it will only legalize spyware just as it’s predecessor legalized SPAM.