One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.
Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.
Mr. X was developing a competitive analysis application for startups in City A. His app was designed to track competitors’ social media activities by automatically collecting public posts from various platforms including X.platform and other social networks. Mr. X believed that since the posts were publicly available, scraping them would be legal. However, Y.company, a major social media platform, sent him a cease and desist notice claiming violation of their terms of service and unauthorized access to their systems. Subsequently, Y.company filed a complaint alleging breach of contract, copyright infringement, and unauthorized computer access. Mr. X faced potential criminal charges and civil liability, forcing him to shut down his application and seek legal assistance to navigate the complex intersection of data protection laws, intellectual property rights, and platform terms of service.
Advice in Such Cases
Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
Review platform terms of service thoroughly before implementing any data collection. Obtain proper API access where available instead of scraping. Consider data minimization principles and implement user consent mechanisms. Ensure compliance with data protection regulations and respect robots.txt files and rate limiting measures.
Applicable Sections of Law
Under the Bharatiya Nyaya Sanhita (BNS), Section 318 addresses cheating and dishonestly inducing delivery of property. Section 329 covers criminal breach of trust. Section 352 deals with intentional insult and criminal intimidation. The Bharatiya Nagarik Suraksha Sanhita (BNSS) Section 173 governs investigation procedures. Additionally, the Information Technology Act provisions regarding unauthorized access to computer systems, data protection laws, and copyright violations under the Copyright Act may apply to data scraping cases.
If You Are the Complainant
- Document all instances of unauthorized data collection with timestamps and screenshots
- Preserve server logs showing unauthorized access patterns and IP addresses
- Gather evidence of terms of service violations and copyright infringement
- Calculate financial damages caused by unauthorized scraping activities
- File complaints with cyber crime cells and approach civil courts for injunctive relief
If You Are the Victim
- Immediately cease all data scraping activities to prevent further legal exposure
- Document your good faith belief that the data was publicly available
- Preserve evidence of your application’s functionality and data usage
- Review and understand the specific terms of service violated
- Prepare evidence showing no malicious intent or commercial harm caused
How the Police Behave in Such Cases
Police typically treat data scraping cases as cyber crimes requiring technical investigation. They examine server logs, collect digital evidence, and analyze the scope of data collection. Officers often collaborate with platform representatives to understand the violation extent. The investigation focuses on determining intent, commercial benefit, and potential harm caused. Police may seize electronic devices and require technical expert assistance for evidence analysis.
FAQs People Normally Have
Is scraping public data always legal? No, even public data scraping can violate terms of service and applicable laws.
What’s the difference between API access and scraping? API access is authorized by platforms, while scraping may breach terms of service.
Can I face criminal charges for data scraping? Yes, under IT Act provisions and BNS sections for unauthorized access.
How can I legally collect competitor information? Use official APIs, publicly available sources, and ensure compliance with platform policies.
What Evidence Is Required?
- Platform terms of service and their violation documentation
- Server access logs showing unauthorized scraping patterns
- Screenshots of the scraping application and collected data
- Communication records between parties regarding the violation
- Financial records showing commercial benefit from scraped data
- Technical analysis reports of scraping methods used
- Witness statements from platform technical teams
How Long Will the Investigation Take?
Data scraping investigations typically take 3-6 months depending on the case complexity and evidence volume. Technical analysis of scraping methods and data collection scope can extend timelines. Court proceedings may continue for 1-2 years if civil remedies are pursued alongside criminal charges. Settlement discussions can resolve matters within 2-3 months if both parties cooperate.
Advocate Sudhir Rao, Supreme Court of India