Is Scraping Public Data Legal in Arizona After the 2026 Framework Overhaul?

Yes, scraping public data in Arizona is generally permissible under state law, provided it complies with federal and local restrictions. Arizona Revised Statutes § 13-2301 prohibits unauthorized access to computer systems, but public records—even digital ones—remain accessible unless protected by statute. Courts have not yet ruled definitively on scraping, but Arizona’s 2023 Public Records Act amendments and the 2026 Arizona Cybersecurity Task Force guidelines suggest a cautious approach: avoid automated collection that could be deemed “excessive” or disruptive to government systems.


Key Regulations for Scraping Public Data in Arizona

  • Arizona Public Records Act (APRA) § 39-121 et seq.: Requires agencies to provide public records upon request, but does not explicitly address scraping. Agencies may deny requests if compliance would “substantially interfere” with operations (A.R.S. § 39-123), a clause that could apply to aggressive scraping.
  • Computer Fraud and Abuse Act (CFAA) Analogues: Arizona’s § 13-2301 criminalizes unauthorized access to computer systems. Scraping without bypassing authentication may avoid liability, but circumventing technical barriers (e.g., IP blocking) risks prosecution under state or federal CFAA interpretations.
  • Local Government Policies: Maricopa County’s 2024 Open Data Policy and Phoenix’s Municipal Code § 23-10 explicitly prohibit automated scraping of municipal databases without prior written consent, reflecting a trend toward local restrictions despite state permissiveness.

Critical Considerations Arizona’s stance aligns with the 9th Circuit’s hiQ Labs v. LinkedIn precedent, which permits scraping of publicly accessible data absent terms-of-service violations. However, Arizona’s 2026 cybersecurity framework prioritizes “responsible data practices,” urging entities to adopt rate-limiting protocols and honor robots.txt directives. Failure to do so may trigger enforcement by the Arizona Attorney General’s newly expanded Consumer Protection Division. Always verify whether the data source is truly public or merely “publicly accessible.”