Yes, scraping public data in Illinois is generally permissible, but strict adherence to state and federal laws is required. Public data accessible without authentication or technical barriers may be scraped, yet unauthorized use or aggregation could violate privacy or anti-hacking statutes.
Key Regulations for Scraping Public Data in Illinois
- Illinois Biometric Information Privacy Act (BIPA): Prohibits scraping biometric data (e.g., facial recognition datasets) without explicit consent, even if publicly posted. Violations incur statutory damages up to $1,000 per negligent violation or $5,000 per intentional violation.
- Computer Fraud and Abuse Act (CFAA) & Illinois Computer Crime Act: Restricts scraping if it involves bypassing access controls (e.g., rate-limiting circumvention). Unauthorized access, even to public-facing sites, may trigger civil or criminal liability under 720 ILCS 5/16D-3.
- Illinois Freedom of Information Act (FOIA): While FOIA mandates public access to government records, scraping automated government databases without authorization may conflict with 5 ILCS 140/6, which prohibits disruptive or excessive requests.
Practical Compliance Considerations
- Terms of Service (ToS): Violating platform ToS (e.g., LinkedIn v. hiQ Labs) may not inherently criminalize scraping but can invite breach-of-contract claims. Illinois courts have not definitively ruled on ToS enforceability in data scraping disputes.
- Data Aggregation Risks: Combining scraped public data with personally identifiable information (PII) may trigger Illinois’ Personal Information Protection Act (PIPA), requiring breach notification protocols.
- 2026 Compliance Shifts: Anticipate stricter enforcement under the Illinois Data Transparency and Privacy Act (IDTPA), slated for full implementation in 2026, which may impose additional obligations on data brokers handling scraped public records.
Courts weigh technical circumvention, data sensitivity, and intent—consult legal counsel before deploying scraping tools targeting Illinois-based datasets.