It is a defense to an action brought pursuant to Subchapter B (relating to hacking and similar offenses) that the actor: (1) was entitled by law or contract to engage in the conduct constituting the offense; or (2) reasonably believed that he had the authorization or permission of the owner, lessee, licensee, authorized holder, authorized possessor or agent of the computer, computer network, computer software, computer system, database or telecommunication device or that the owner or authorized holder would have authorized or provided permission to engage in the conduct constituting the offense. As used in this section, the term 'authorization' includes express or implied consent, including by trade usage, course of dealing, course of performance or commercial programming practices.
Pennsylvania Legal Code