ICO Joint Statement On Data Scraping And The Protection Of Privacy

On August 24, the Information Commissioner's Office (ICO) issued a joint statement in conjunction with 11 other global authorities responsible for data protection and privacy on data scraping. Data scraping is the process of extracting data from online sources, including social media platforms and websites that host publicly accessible personal information. Scraped personal information is valuable and can be monetized through reuse on third-party websites, sale to malicious actors, or use for private analysis or intelligence gathering. This can result in serious risks to the individuals concerned.

The ICO's statement underscored how data scraping has increasingly created significant privacy concerns that may constitute reportable data breaches and lead to exploitation through identity fraud, targeted cyberattacks or unsolicited direct marketing spam. It highlighted that even where personal information is publicly available, it is still subject to data protection