Web Scraping Legal News
The main web scraping legal news of 2026: on September 29 the Third Circuit affirmed that Ross Intelligence's copying of 2,243 Westlaw headnotes to build an AI legal research tool was not fair use (Thomson Reuters v. Ross), LinkedIn obtained a consent judgment against a data provider on September 16, a New York court let Reddit's anti-circumvention claims over scraped search data go forward on July 31, a federal judge dismissed Google's first complaint against a SERP data provider on July 20 (Google has refiled), Amazon won a preliminary injunction against Perplexity's AI shopping agent on March 9, and in July the EU's data protection board put out draft guidelines on scraping for AI. The pattern since 2024 is a shift from anti-hacking claims to contract, anti-circumvention, copyright and AI-agent claims. ProxyField sells residential proxies for lawful public-data work from $1.95/GB; start with the Easy Trial: 1 GB for $2.95.
- residential IPs
- 412M+
- from, traffic never expires
- $1.95/GB
- Easy Trial
- 1 GB for $2.95
On this page 9 sections
- Can you get sued for web scraping?
- Is scraping public data still legal after Meta and X sued a data company?
- 2026: AI agents, anti-circumvention and consent judgments
- 2025: AI training, fair use and a reversed CFAA verdict
- 2024: logged-out scraping and personal data
- 2022: hiQ v. LinkedIn, the case everyone still cites
- What the cases mean for scrapers
- Web Scraping Legal News FAQ
- Sources
Can you get sued for scraping? Yes: the claims that went forward in 2024–2026 were breach of terms you accepted, getting around technical defenses (DMCA section 1201), copyright, and the CFAA's civil claim where access was unauthorized and caused at least USD 5,000 in loss. Scraping public pages while logged out has fared best in US courts. The details are below.
Updated October 27, 2026. Dockets read on CourtListener on October 23, 2026; the Third Circuit's Ross opinion read on October 27, 2026. Each docket is linked so you can check the current status.
| Date | Case or event | What happened |
|---|---|---|
| Sep 29, 2026 | Thomson Reuters v. Ross (3d Cir. No. 25-2153) | Affirmed: Westlaw headnotes are copyrightable and Ross's use to train an AI tool was not fair use |
| Sep 16, 2026 | LinkedIn v. a data provider (N.D. Cal.) | Judgment on consent |
| Jul 31, 2026 | Reddit v. Perplexity and three data companies (S.D.N.Y.) | Motions to dismiss of Perplexity and one data company largely denied; DMCA § 1201(a) anti-circumvention and conspiracy claims go forward |
| Jul 20, 2026 | Google v. a SERP data provider (N.D. Cal.) | First complaint dismissed with leave to amend; amended complaint filed August 10 |
| Jul 7, 2026 | EDPB Guidelines 03/2026 | Draft guidelines on web scraping for generative AI, public consultation |
| Mar 28, 2026 | Reddit v. Anthropic | Federal court sends the case back to state court |
| Mar 9, 2026 | Amazon v. Perplexity (N.D. Cal.) | Preliminary injunction for Amazon; Perplexity appealed (argued June 11, 2026; no decision as of October 23, 2026) |
| Dec 19, 2025 | Google v. a SERP data provider | Complaint filed |
| Nov 4, 2025 | Amazon v. Perplexity | Complaint filed over an AI shopping agent |
| Oct 22, 2025 | Reddit v. Perplexity and three data companies (S.D.N.Y.) | Complaint filed |
| Feb 11, 2025 | Thomson Reuters v. Ross (D. Del.) | No fair use for copying legal headnotes to build an AI tool |
| Jan 22, 2025 | Ryanair v. Booking.com (D. Del.) | Judge sets aside the July 2024 jury verdict on the CFAA claim |
| Jan 23 and May 2024 | Meta and X v. the same data company (N.D. Cal.) | Both platforms lose their main claims over logged-out scraping |
| Apr 18, 2022 | hiQ Labs v. LinkedIn (9th Cir.) | Scraping public profiles likely not "without authorization" |
Can you get sued for web scraping?
Yes. Scraping is not illegal in itself, but each of these claims has reached a US court or a European regulator in the last three years. In order of how often they come up now:
| Claim | When it applies | The case that shows it |
|---|---|---|
| Breach of contract (terms of service) | You accepted the terms, for example by creating an account or logging in | hiQ lost to LinkedIn on contract in November 2022; LinkedIn's 2026 case against a data provider ended in a consent judgment |
| Anti-circumvention, 17 U.S.C. § 1201 | You get around a technical measure that controls access to copyrighted works | Reddit's § 1201(a) claims against Perplexity and a data company survived dismissal on July 31, 2026 |
| Copyright | You copy protected content, including to train AI | The Third Circuit affirmed on September 29, 2026 that Ross's use of Westlaw headnotes was not fair use |
| CFAA civil claim, 18 U.S.C. § 1030(g) | Access "without authorization" plus damage or "loss" to one or more persons of at least USD 5,000 in any 1-year period; the suit must start within 2 years | Ryanair won a CFAA jury verdict against Booking.com in July 2024, set aside in January 2025; hiQ (2022) and Van Buren (2021) keep public pages outside "without authorization" |
| Personal data (GDPR) | You scrape data about people without a lawful basis | The Dutch regulator fined Clearview AI €30,500,000 in September 2024 |
| AI agents and platform rules | Your software acts on a platform that bans agents or sets agent rules | Amazon's March 9, 2026 preliminary injunction against Perplexity's shopping agent |
The CFAA's "loss" counts the victim's reasonable costs, such as responding to the offense, assessing the damage and restoring systems, and revenue lost during an interruption of service (§ 1030(e)(11)). Criminal charges are a separate question: under the Justice Department's policy, updated in May 2022, a CFAA prosecution may not rest solely on violating an access restriction in a contract or terms of service (Justice Manual 9-48.000).
Is scraping public data still legal after Meta and X sued a data company?
Yes, for public pages you reach while logged out: in the US, courts have so far sided with the scraper.
- Meta, January 23, 2024. A federal court in San Francisco granted the data company summary judgment on Meta's contract claim: Meta's terms governed account holders using its platforms, not scraping while logged out (order, N.D. Cal. No. 3:23-cv-00077).
- X, May 2024. X's suit against the same company was dismissed: the court held that X's contract claims over public data were preempted by copyright law (docket, N.D. Cal. No. 3:23-cv-03698).
What stays risky after these rulings:
- They are district court rulings. They do not bind other courts.
- Logged-in scraping. Terms bind account holders: hiQ lost to LinkedIn on contract.
- Getting around defenses. Reddit's anti-circumvention claims go forward (July 31, 2026).
- AI agents. Amazon's 2026 injunction targets an agent that shops on users' behalf.
- Personal data in Europe. The GDPR applies whether or not the data is public.
2026: AI agents, anti-circumvention and consent judgments
Thomson Reuters v. Ross: the Third Circuit affirms. On September 29, 2026, a Third Circuit panel (Judges Restrepo, Montgomery-Reeves and Bove; opinion by Judge Montgomery-Reeves) decided Ross Intelligence's interlocutory appeal of the 2025 ruling. The court held that Thomson Reuters's 2,243 headnotes "are original enough for copyright protection" and that Ross's use of them was not fair: the second fair-use factor weighed slightly for Ross, the first, third and fourth against it, and the court affirmed partial summary judgment for Thomson Reuters (opinion, No. 25-2153; appeal docket). The court called it "no more than an ordinary copyright case". For scrapers, the point is that collecting curated, edited content to build a competing product is copying, whatever the technology.
Reddit v. Perplexity and three data companies. Filed on October 22, 2025, in the Southern District of New York, Reddit's suit targets an AI answer engine and three companies that collect search data, over Reddit content taken from Google's results. On July 31, 2026, Judge Paul A. Engelmayer largely denied the motions to dismiss of Perplexity and one data company: the claims under the DMCA's anti-circumvention provision, section 1201(a), and a New York civil-conspiracy claim go forward, while a section 1201(b) claim and the state-law unjust-enrichment and unfair-competition claims were dismissed. This is not a finding of liability, but it lets a claim about getting past technical barriers go to the merits. A third data company's own motion to dismiss was briefed in August and September 2026, and the case was still active in October 2026 (docket, No. 1:25-cv-08736).
Google v. a SERP data provider. On December 19, 2025, Google sued a company that sells Google search results through an API. On July 20, 2026, Chief Judge Yvonne Gonzalez Rogers granted the defendant's motion to dismiss and gave Google until August 10 to amend; Google filed an amended complaint that day, and a new motion to dismiss followed (docket, N.D. Cal. No. 4:25-cv-10826). What it means for scraping Google is in is scraping Google legal.
Amazon v. Perplexity: an injunction against an AI shopping agent. Amazon sued Perplexity on November 4, 2025, over the agentic shopping features of Perplexity's Comet browser. On March 9, 2026, Judge Maxine M. Chesney granted Amazon's motion for preliminary injunctive relief, and Perplexity appealed to the Ninth Circuit the next day (No. 26-1444); the appeal was argued on June 11, 2026, and the docket showed no decision on October 23, 2026 (docket, N.D. Cal. No. 3:25-cv-09514). In August 2026 Amazon added "Agent Terms" to its Conditions of Use (last updated August 14, 2026): agents must identify themselves in the user agent string, must not imitate human behavior or complete CAPTCHAs, and must stop when Amazon asks. More in is scraping Amazon legal.
LinkedIn v. a data provider. LinkedIn sued a company that sold LinkedIn data through an API on October 2, 2025; the case ended in a judgment on consent on September 16, 2026 (docket, N.D. Cal. No. 5:25-cv-08393). LinkedIn's User Agreement (effective November 3, 2025) still bars software and scripts that "scrape or copy the Services, including profiles". See is scraping LinkedIn allowed.
Reddit v. Anthropic. Reddit's contract-based suit over the use of Reddit content was removed to federal court in July 2025; on March 28, 2026, the federal court granted the motion to remand it to state court (docket, No. 3:25-cv-05643).
EU: the EDPB's scraping guidelines. On July 7, 2026, the European Data Protection Board adopted Guidelines 03/2026 on web scraping in the context of generative AI for public consultation. They expect scrapers to exclude sites that clearly oppose scraping, naming robots.txt, ai.txt and CAPTCHAs as signals. The European picture is in the UK and EU guide.
Platform terms in 2026. TikTok's US Terms of Service, last updated July 15, 2026, are now with TikTok USDS Joint Venture LLC and still forbid scraping without written approval. eBay's robots.txt, version "v30.2_COM_August_2026", adds an agent policy: "Checkouts are strictly for human users" (eBay robots.txt).
2025: AI training, fair use and a reversed CFAA verdict
Thomson Reuters v. Ross Intelligence. On February 11, 2025, Judge Stephanos Bibas, sitting by designation, held that copying Westlaw headnotes to train a competing legal research tool was not fair use; the Third Circuit affirmed in 2026 (above) (district docket, D. Del. No. 1:20-cv-00613).
Ryanair v. Booking.com. A Delaware jury found for Ryanair on its CFAA claim over screen scraping of its website on July 18, 2024. On January 22, 2025, Judge William C. Bryson granted Booking.com's motion for judgment as a matter of law. Ryanair appealed to the Third Circuit, and the appeal was terminated in August 2025 (docket, D. Del. No. 1:20-cv-01191).
AI training and fair use. In June 2025, two judges in the Northern District of California ruled on training AI models on books: in Bartz v. Anthropic, Judge William Alsup found training on lawfully bought books to be fair use but not keeping pirated copies, and the case later settled (docket, No. 3:24-cv-05417); in Kadrey v. Meta, Judge Vince Chhabria granted Meta summary judgment on the record before him. The AI side is covered in is AI scraping legal.
Monthly round-up, September to December 2025.
- September 2025: the Bartz v. Anthropic settlement over pirated books.
- October 2025: LinkedIn sues a data provider (October 2); Reddit sues Perplexity and three data companies (October 22).
- November 2025: Amazon sues Perplexity over its shopping agent (November 4).
- December 2025: Google sues a SERP data provider (December 19).
2024: logged-out scraping and personal data
- January 23 and May 2024. Meta and X lose their main claims against the same data company over logged-out scraping (details above and in the Meta and X section); the X case closed with an end-of-case order on July 1, 2025.
- September 3, 2024. The Dutch data protection authority announced a €30,500,000 fine on Clearview AI for its database of scraped photos (EDPB news).
- December 17, 2024. The EDPB adopted Opinion 28/2024 on personal data in AI models (published December 18).
2022: hiQ v. LinkedIn, the case everyone still cites
On April 18, 2022, the Ninth Circuit held that scraping LinkedIn profiles anyone could view was likely not access "without authorization" under the CFAA (opinion, No. 17-16783). In November 2022 the district court found hiQ had breached LinkedIn's User Agreement, and the case ended in a consent judgment in December 2022 (docket, No. 3:17-cv-03301). The full background is in is web scraping legal.
What the cases mean for scrapers
- Public, logged-out pages are still the safest ground in the US: hiQ, Meta's and X's 2024 losses all turn on that line.
- Contracts bind account holders. hiQ lost on contract, and LinkedIn's 2026 case ended in a consent judgment.
- Copying content is copyright, not scraping law. Ross (2026) shows that curated content reused to build a competing product is not fair use.
- Anti-circumvention and agent rules are the new front. Platforms now attack the way a scraper gets past their defenses, and they write rules for AI agents into their terms.
- Europe regulates through data protection. Fines and guidelines target personal data, not the act of scraping.
Before you build, check the site's rules: how to check if a website allows scraping.
Web Scraping Legal News FAQ
What is the latest web scraping legal news?
ProxyField sells residential proxies from $1.95/GB for lawful public-data work and tracks the dockets linked on this page: the latest ruling is the Third Circuit's September 29, 2026 decision affirming that Ross Intelligence's AI training on 2,243 Westlaw headnotes was not fair use, after LinkedIn's September 16 consent judgment against a data provider. On July 31 a New York court let Reddit's anti-circumvention claims over scraped search data go forward, Google's first complaint against a SERP data provider was dismissed with leave to amend on July 20 and refiled on August 10, and Amazon's March 9 injunction against Perplexity's shopping agent is on appeal, argued June 11 with no decision as of October 23. In Europe, the EDPB opened a consultation on scraping for AI in July 2026.
Can I get sued for web scraping, and what are the real legal risks?
Yes. The claims that have gone forward are breach of terms you accepted (hiQ's 2022 loss to LinkedIn, LinkedIn's 2026 consent judgment), getting around technical defenses under DMCA § 1201 (Reddit's case, July 31, 2026), copyright when scraped content is reused or trains AI (Thomson Reuters v. Ross, affirmed September 29, 2026), and the CFAA's civil claim, which needs unauthorized access and at least USD 5,000 in loss in a year (18 U.S.C. § 1030(g)). In Europe, the risk is personal data: the Dutch regulator fined Clearview AI €30,500,000 in 2024. Scraping public pages while logged out has fared best in US courts.
Is scraping public data still legal after Meta and X sued a data company over it?
Yes, for public pages you reach while logged out, US courts have so far sided with the scraper: on January 23, 2024 a court held Meta's terms did not reach logged-out scraping, and in May 2024 X's contract claims over public data were dismissed as preempted by copyright law. These are district court rulings, so they do not bind other courts, and they do not cover logged-in scraping, getting around technical defenses or personal data in Europe.
What were the main web scraping legal news stories of 2025?
The 2025 headlines were AI and new lawsuits: a ruling that copying Westlaw headnotes to train an AI tool was not fair use (February), the reversal of Ryanair's CFAA jury verdict against Booking.com (January), two June rulings on training AI on books, and suits by LinkedIn, Reddit, Amazon and Google against scrapers and AI companies between October and December.
What happened in web scraping law in December 2025?
On December 19, 2025, Google sued a company that sells Google search results through an API, in the Northern District of California (No. 4:25-cv-10826). The first complaint was dismissed with leave to amend in July 2026, and Google filed an amended complaint on August 10, 2026.
What happened in web scraping law in November 2025?
On November 4, 2025, Amazon sued Perplexity over the agentic shopping features of its Comet browser (N.D. Cal. No. 3:25-cv-09514). The court granted Amazon a preliminary injunction on March 9, 2026, and Perplexity appealed to the Ninth Circuit, which heard argument on June 11, 2026.
What happened in web scraping law in October 2025?
LinkedIn sued a company that sold LinkedIn data through an API on October 2, 2025, a case that ended in a consent judgment in September 2026. On October 22, 2025, Reddit sued Perplexity and three data companies in New York over Reddit content collected from Google's results.
What is the SERP API lawsuit about?
Two suits target SERP data. Google sued a SERP API provider in December 2025, and Reddit's October 2025 suit names an AI answer engine and three data companies that collect search results. Neither had reached a final judgment by October 2026: Google's first complaint was dismissed with leave to amend and refiled, and in Reddit's case the court largely denied two defendants' motions to dismiss on July 31, 2026, so the DMCA anti-circumvention and civil-conspiracy claims go forward.
Did Ryanair win its scraping lawsuit against Booking.com?
Only for a while. A Delaware jury found for Ryanair on its CFAA claim in July 2024, but on January 22, 2025, the judge granted Booking.com judgment as a matter of law. Ryanair appealed to the Third Circuit, and the appeal was terminated in August 2025.
Which court rulings on scraping matter most?
In the US, Van Buren (2021) and hiQ v. LinkedIn (2022) narrowed the anti-hacking law for public pages, hiQ's later contract loss showed the power of accepted terms, the 2024 rulings for a data company against Meta and X protected logged-out scraping, and Thomson Reuters v. Ross (2026) set the copyright limit for AI training. In the EU, the Court of Justice's database-right cases, British Horseracing Board (2004) and CV-Online (2021), and Ryanair v PR Aviation (2015) on contracts remain the reference points.
Sources
Dockets were read on CourtListener on October 23, 2026; the Third Circuit opinion on October 27, 2026.
- Thomson Reuters v. Ross Intelligence, 3d Cir. No. 25-2153, opinion of September 29, 2026
- Thomson Reuters v. Ross Intelligence, 3d Cir. No. 25-2153, docket
- Thomson Reuters v. Ross Intelligence, D. Del. No. 1:20-cv-00613
- Amazon.com Services v. Perplexity AI, N.D. Cal. No. 3:25-cv-09514
- Google v. a SERP data provider, N.D. Cal. No. 4:25-cv-10826
- Reddit v. a data company and others, S.D.N.Y. No. 1:25-cv-08736
- Reddit v. Anthropic, N.D. Cal. No. 3:25-cv-05643
- LinkedIn v. a data provider, N.D. Cal. No. 5:25-cv-08393
- Ryanair v. Booking Holdings, D. Del. No. 1:20-cv-01191
- Bartz v. Anthropic, N.D. Cal. No. 3:24-cv-05417
- Meta v. a data company, N.D. Cal. No. 3:23-cv-00077, order of January 23, 2024 (Dkt. 181)
- X v. a data company, N.D. Cal. No. 3:23-cv-03698
- hiQ Labs v. LinkedIn, 9th Cir., April 18, 2022
- hiQ Labs v. LinkedIn, N.D. Cal. No. 3:17-cv-03301
- 18 U.S.C. § 1030 (Computer Fraud and Abuse Act)
- 17 U.S.C. § 1201 (DMCA anti-circumvention)
- Justice Manual 9-48.000, Computer Fraud and Abuse Act (updated May 2022)
- EDPB, Guidelines 03/2026 on web scraping in the context of generative AI
- EDPB, Opinion 28/2024 (adopted December 17, 2024)
- EDPB news, Dutch authority fines Clearview AI
- Amazon Conditions of Use (last updated August 14, 2026)
- LinkedIn User Agreement (effective November 3, 2025)
- TikTok US Terms of Service (last updated July 15, 2026)
- eBay robots.txt
This is not legal advice. Laws and court decisions change, and the primary sources linked on this page are the authority.
Related pages
Easy Trial: 1 GB for $2.95.
Try for the price of 1 GB, no subscription, traffic never expires.