Is Price Scraping Legal in the EU? A 2026 Guide to Compliant Competitor Price Monitoring

Your category manager wants competitor prices every morning.

Your lawyer wants to know if you're even allowed to collect them.

So, is price scraping legal in the EU? Most of the time, yes. But it depends on three things: what you collect, how you collect it, and what you do with it.

Below, we walk through the court cases that shape the answer, from Luxembourg to Karlsruhe to Copenhagen. Then we finish with a seven-step checklist for your team.

Quick note: this is general information for pricing and e-commerce teams, not legal advice. If you're planning something specific, check with a lawyer in that country.

Is Price Scraping Legal in the EU? The Short Answer

Yes, price scraping is generally legal in the EU if you collect publicly visible prices without logging in, getting around technical barriers or overloading servers. It becomes illegal when it breaks binding website terms, copies a substantial part of a protected database, collects personal data without a legal basis, or helps fix prices.

There's no single EU law on scraping.

Instead, several sets of rules overlap:

• Contract law, meaning the website's terms of service
• The database right from the EU Database Directive
• Copyright, including the text-and-data-mining exception
• Unfair competition law, which differs by country
• GDPR, whenever people's data is involved
• Competition law, which covers how you use the data

What Is Price Scraping? Competitor Price Monitoring Explained

Price scraping means using software to collect prices and product details from competitor websites.

The usual fields are price, discount, stock status, delivery cost, EAN or SKU, and promotion flags. Retailers use them for automated competitor price monitoring, repricing and spotting gaps in their range.

It isn't hacking. Done right, your scraper sees the same public page any shopper sees.

It isn't copying content either. Taking a competitor's product descriptions or photos is a copyright problem. Noting their price isn't.

How you collect the data matters a lot, because websites are working hard to keep bots out.

The 2025 Imperva Bad Bot Report found that bots made up 51% of all web traffic in 2024. Malicious bots alone accounted for 37%.

That's why courts, especially in Germany, look closely at whether a scraper went around a site's defences. We covered the website side of this in the anti-bot arms race.

3 Factors That Decide If Price Scraping Is Legal: Data Type, Access Method and Use

Almost every EU scraping dispute comes down to three questions.

1. What are you collecting?

A single price is a fact, and copyright doesn't protect facts.

A large, well-maintained collection of facts is different. It can be protected as a database.

Product descriptions and photos are usually protected by copyright. Anything that identifies a person falls under GDPR.

2. How are you collecting it?

Reading public pages without logging in, at a sensible pace? That's the low-risk end.

Logging in, using fake accounts, solving CAPTCHAs or carrying on after a site blocks you? That's the high-risk end.

3. What do you do with it?

Using prices for your own pricing decisions is one thing.

Republishing a competitor's whole catalogue on your own site is another. Using the data to pressure resellers on price is a different problem altogether.

Factor	Lower risk	Higher risk
What you collect	Prices, stock, EAN, promo flags	Descriptions, photos, reviewer or seller personal data
How you collect it	Public pages, sensible pace, no login	Logins, fake accounts, CAPTCHA bypass, ignored blocks
How you use it	Your own pricing decisions	Public copy of a competitor's database, policing reseller prices

EU Web Scraping Laws That Apply to Price Monitoring: GDPR, the Database Directive and Copyright

Here's a quick tour of the main rules.

The Database Directive. If someone made a substantial investment in building a database, they get a special "sui generis" right over it. They can stop others from extracting or reusing all of it, or a substantial part.

Repeatedly taking small parts can also infringe, if it's systematic.

The DSM Copyright Directive. Article 4 allows text and data mining by anyone with lawful access, including for commercial purposes.

The catch: rights holders can opt out. For online content, the Directive points to machine-readable opt-outs, and countries like Germany make that a firm requirement. The exception covers databases as well as copyrighted content.

GDPR. It applies as soon as a scraped record identifies a person.

Contract and unfair competition law. These are still national. That's why the same scraper can be treated differently in Amsterdam, Hamburg and Copenhagen.

Website Terms of Service and Price Scraping: What Ryanair v PR Aviation Means for Retailers

You might read online that the EU's top court "allowed" a comparison site to scrape Ryanair.

That's not what happened.

PR Aviation, a Dutch comparison site, scraped Ryanair's flight data. Ryanair's terms banned commercial scraping without a licence.

The Dutch Supreme Court asked the Court of Justice of the EU (CJEU) whether the Database Directive's user exceptions still applied if Ryanair's data wasn't protected by it.

In its judgment of 15 January 2015 (C-30/14), the CJEU said the Directive only covers databases protected by copyright or by the database right.

If a database has neither, those user exceptions don't apply. So the owner is free to restrict use through its terms, within the limits of national law.

In other words, the ruling helped website owners, even those whose data has no database protection.

What this means for you:

• Terms of service matter. A ban on automated collection may be enforceable under national contract law.
• Terms you actively accepted usually count most. Clicking "I agree" when opening an account carries more weight than a footer link nobody opened.
• Competition law can push back. A Milan court ruled in 2013 that Ryanair abused its dominant position by refusing an online travel agency access to its data, as MediaLaws reported.

Ryanair isn't the only platform drawing this line. Google Maps' terms explicitly forbid bulk-exporting or scraping search results, with similar restrictions on caching data pulled from its Places API. Our guide to exporting Google Maps data legally breaks down what its terms actually allow.

EU Database Rights and Price Scraping: Innoweb and CV-Online Explained

Innoweb v Wegener (C-202/12, 2013)

Innoweb ran GasPedaal, a search engine for used-car ads.

It pushed users' searches straight into other car sites in real time. On Wegener's AutoTrack site alone, it ran about 100,000 searches a day.

The CJEU said this was reuse of AutoTrack's database, because GasPedaal risked cutting into the database maker's revenue.

It didn't help that users still had to click through to the original ads.

CV-Online Latvia v Melons (C-762/19, 2021)

Melons ran a job-ad search engine. It indexed job sites, including cv.lv, and kept copies on its own servers.

The CJEU agreed that copying and indexing a database counts as extraction and reuse.

But it added a condition. This only infringes if it harms the maker's investment, for example by costing it income.

National courts also have to weigh that against the public's access to information and fair competition.

What this means for price monitoring

Taking a few fields from product pages for internal use is a long way from Innoweb. You're not offering shoppers a replacement for the competitor's site.

Copying a full catalogue and publishing it is much closer to the line.

Is Price Scraping Legal in Germany? DACH Rules for Competitor Price Monitoring

The BGH screen-scraping ruling

Ryanair also went to court in Germany, against a flight booking portal that scraped its fares (BGH, 30 April 2014, I ZR 224/12).

Here's the twist. The portal had ticked a box accepting Ryanair's terms, and those terms banned scraping.

Germany's Federal Court of Justice (BGH) still found no unfair obstruction under the Unfair Competition Act (UWG).

Why? The flight data was freely available, and Ryanair hadn't used any technical block. A ticked box isn't a technical barrier.

Now the other side of it.

The BGH has repeatedly said that interfering with a competitor's product is usually unfair if you get around a protective measure built to stop exactly that.

Put simply: public data is fine. Defeating a bot wall isn't.

That rule now sits in § 4 Nr. 4 UWG. And getting past password protection or similar access controls can even be a crime under § 202a StGB.

The § 44b UrhG text-and-data-mining opt-out

Germany put the EU opt-out into § 44b UrhG.

Commercial text and data mining is allowed unless the rights holder has reserved it. For online content, that reservation has to be machine-readable.

What counts as "machine-readable" is still being argued in the LAION case, a dispute over an AI training dataset:

• Hamburg Regional Court, September 2024: suggested plain-language terms on a website might be enough.
• Hamburg Higher Regional Court, 10 December 2025: disagreed. It wouldn't assume plain-text terms were machine-readable back in 2021 and left open whether that has changed.
• BGH, 3 September 2026: heard the appeal (I ZR 281/25) and hinted it may send questions to the CJEU. No decision had been published at the time of writing.

Our advice for pricing teams: treat robots.txt rules and opt-out metadata as binding. Don't wait for the courts to settle the plain-text question.

Austria and Switzerland

Austria applies the same EU directives, including the database right and the text-and-data-mining opt-out.

Switzerland is different. It has no EU-style database right, and its own data protection law applies instead of GDPR.

Swiss unfair competition law (Art. 5 lit. c UWG) targets taking over someone else's finished work product by technical copying, without real effort of your own. So copying a whole catalogue is risky. Collecting individual prices isn't the issue.

Price Scraping in the Nordics: Legal Considerations for Sweden, Denmark, Finland and Norway

The Nordic countries protected data collections long before the EU Database Directive, through what's known as the "catalogue rule."

So database protection is familiar ground for Nordic courts.

Denmark

Danish courts have ruled on scraping several times.

Most cases rely on the database rule in § 71 of the Danish Copyright Act and on the Marketing Practices Act. In a 2018 case, the classifieds site GulogGratis won its case against a site that reused its listings.

The big recent case is BoligPortal v ReData. Here's how it played out:

• October 2025: the Maritime and Commercial High Court found that ReData's systematic scraping of rental ads broke both the Copyright Act and the Marketing Practices Act.
• Only eight fields: ReData took just eight data points per ad, like location, rent, number of rooms and energy label. The court still treated that as a substantial part of the database in terms of value, because those fields reflected BoligPortal's investment.
• May 2026: the Eastern High Court lifted the temporary ban. BoligPortal's opt-out was written in plain language inside a privacy policy, linked from the footer. The court said that wasn't machine-readable, so ReData could rely on the text-and-data-mining exception.

The takeaway works both ways.

A few fields per page can still count as "substantial." But a proper machine-readable opt-out now decides whether a scraper can rely on the exception.

Sweden

Sweden protects databases through the catalogue rule in § 49 of its Copyright Act (upphovsrättslagen).

The EU text-and-data-mining exception has applied since 1 January 2023, with the same machine-readable opt-out.

Scraping behind a login can count as dataintrång, the Swedish crime of unauthorised data access.

We didn't find a leading Swedish court ruling on price scraping itself. Expect Swedish courts to follow the CJEU and their Nordic neighbours.

Finland

Finland's catalogue rule is in § 49 of its Copyright Act (tekijänoikeuslaki).

Its text-and-data-mining exception, § 13 b, took effect on 3 April 2023.

Finland also has a criminal angle. The copyright offence in its Criminal Code explicitly covers databases when the infringement is commercial and likely to cause considerable harm.

Norway

Norway isn't in the EU, but it is in the EEA. So GDPR and the Database Directive still apply.

Database protection sits in § 24 of the Copyright Act (åndsverkloven). Norway's Supreme Court has already weighed database protection against free speech, in a dispute over court decisions said to come from Lovdata's databases (HR-2019-1725-A).

The big difference: Norway hasn't brought the DSM Directive into force yet.

The government put forward its bill, Prop. 41 LS (2025-2026), on 27 March 2026. As of September 2026, the bill is still with the parliamentary committee.

Until it takes effect, there's no commercial text-and-data-mining exception to lean on, so check its status before you rely on one.

Price Scraping and GDPR: When Product Data Becomes Personal Data

A company's prices aren't personal data. GDPR doesn't protect companies.

But product pages often include personal data you never meant to collect:

• Marketplace seller names. Some sellers on Amazon, eBay or Bol are sole traders, and a sole trader's name identifies a real person.
• Reviewer profiles. Names, photos and review histories are all personal data.
• Seller contact details on listings or imprint pages.

European regulators take this seriously.

In May 2024, the Dutch data protection authority (AP) said scraping by private companies is almost always a GDPR breach. It also said purely commercial interests aren't enough to justify it.

The CJEU has since softened that last point. In the KNLTB case (C-621/22, October 2024), it said a commercial interest can count as a legitimate interest.

Fines are real, too. In December 2024, France's CNIL fined KASPR €240,000. KASPR had collected LinkedIn users' contact details, including from people who had limited who could see them.

What to do in practice:

• Skip reviewer data unless you really need it.
• Store marketplace sellers under a code instead of a name where you can.
• If you rely on legitimate interest, document your balancing test (a legitimate interest assessment).
• Set a retention limit and stick to it.

If marketplaces are a big part of your monitoring, see our guide to scraping Amazon and eBay marketplace data.

Price Monitoring vs Price Fixing: EU Competition Law Limits for Retailers and Brands

Checking competitors' public prices and setting your own is normal business.

Competition law cares about what you do next.

In July 2018, the European Commission fined Asus, Denon & Marantz, Philips and Pioneer €111 million in total. They had pushed online retailers to stick to fixed or minimum prices. That's called resale price maintenance, or RPM.

Price monitoring played a part.

The manufacturers used software to track retailers' online prices, which made the minimums easier to enforce, as Dechert explained. These were also the Commission's first RPM fines in 15 years.

According to Noerr, the Commission noted that retailers' own repricing tools spread the effect across the market.

The 2022 Vertical Guidelines make the line clear. Monitoring and reporting prices isn't RPM on its own.

Using that data to threaten or punish resellers is.

Two things brands often miss:

• MAP policies count as a hardcore restriction in the EU. Minimum advertised price policies are common in the US, but the EU treats them as one of the most serious restrictions. Monitoring advertised prices is fine. Forcing resellers to stay above a floor isn't. Our MAP monitoring guide covers the monitoring side.
• Don't share non-public pricing with competitors, not even through a shared vendor. Public shelf prices are fine. Confidential future prices aren't.

EU vs US Web Scraping Law: Why hiQ v LinkedIn Doesn't Protect European Retailers

People often point to hiQ v LinkedIn as a win for scrapers.

The full story is less encouraging:

• 2017 to 2019: hiQ won a preliminary injunction, and the Ninth Circuit upheld it.
• 2021: the US Supreme Court sent the case back for another look after its Van Buren ruling.
• April 2022: the Ninth Circuit sided with hiQ again on the US anti-hacking law (CFAA) for public data.
• November 2022: the district court found that hiQ broke LinkedIn's User Agreement by scraping and using fake profiles.
• December 2022: the case ended in a consent judgment. hiQ accepted a $500,000 judgment, a permanent ban and deletion of its scraped data and code.

And even hiQ's wins were about a US hacking law. Europe fights these cases on different ground.

Issue	United States	EU / EEA
Main legal fight	Anti-hacking law (CFAA), contract	Database right, contract, unfair competition
Database protection	No special right	15-year database right
Public personal data	No comprehensive federal privacy law	Fully covered by GDPR
How sites opt out	Contracts and technical blocks	Contracts, technical blocks and machine-readable opt-outs

So a European retailer can't lean on hiQ. You need to follow the EU rules.

Red Flags That Make Price Scraping Illegal: Logins, CAPTCHA Bypass and Server Overload

If any of these sound like your setup, your risk goes up fast.

• Logins or fake accounts. You've probably accepted binding terms. Fake profiles were a big reason hiQ lost on contract.
• Getting around CAPTCHAs or bot walls. German courts see this as a clear sign of unfair conduct.
• Carrying on after a block or a cease-and-desist letter. Once a site has clearly said no, you lose the good-faith argument.
• Overloading servers. Heavy request rates can disrupt a competitor's shop and invite a lawsuit.
• Ignoring robots.txt or other opt-outs. After the Danish ruling, this is the clearest legal signal a site can send.
• Publishing a copy of a competitor's catalogue. That's the Innoweb situation.

How to Monitor Competitor Prices Legally: A 7-Step Compliance Checklist

Follow these seven rules and most retail price monitoring stays on the right side of EU law.

1. Stick to public pages. No logins, no fake accounts, and no trade portals unless you have a contract.
2. Collect facts, not content. Price, discount, stock, delivery cost, EAN and promo flags. Leave descriptions and images alone unless you have a licence.
3. Respect opt-outs. Check robots.txt (RFC 9309) and opt-out metadata before each crawl, and keep a log. Ahrefs' robots.txt guide is a good plain-English intro.
4. Read the terms. Know which sites ban automated access, and where you've accepted terms yourself.
5. Crawl politely. Limit your request rate, avoid peak hours, and never bypass CAPTCHAs or blocks.
6. Keep personal data to a minimum. Remove or code seller and reviewer fields, and write down your reasons for anything you keep.
7. Keep the data for your own decisions. Don't use it to pressure resellers, and don't share non-public prices with competitors.

Write all of this down.

If a competitor's lawyer ever gets in touch, that record is your best defence.

In-House Price Scraping vs Managed Price Monitoring: Who Carries the Legal Risk?

If you build scrapers in-house, every risk above is yours.

Your developers also end up making legal calls at 2 a.m. when a site changes its bot protection.

With a managed provider, the contract splits the collection risk. Ask any vendor for:

• A written description of how they collect data (public pages only, no CAPTCHA bypass) and how they handle opt-outs
• A data processing agreement if any personal data is involved
• EU hosting, clear retention periods and a commitment that collection is lawful

The risk from how you use the data always stays with you. No vendor can make RPM legal.

Honestly, the law usually isn't the biggest cost of doing this in-house. The process is.

Think spreadsheets passed back and forth between assistants and category managers. Think "Category X_Prices_FINAL_v3.xlsx" doing the rounds for days.

A managed service like ScrapeWise.ai collects competitor prices within these rules, matches them to your products and delivers them into your workflow.

Weighing your options? Read our competitive price monitoring tools guide and our comparison of web scraping vs API for retail data.

FAQ: Price Scraping Legality in Europe

Is web scraping legal in Europe?

Usually, for public data. But database rights, website terms, copyright, unfair competition rules and GDPR can each make a specific project illegal.

The safe approach: collect public facts, respect opt-outs, and skip logins and workarounds.

Does robots.txt have legal force in the EU?

More and more, yes. Under the EU text-and-data-mining rules, a machine-readable opt-out blocks commercial data mining of online content.

In May 2026, Denmark's Eastern High Court said an opt-out must be readable by automated systems, and rejected a plain-language one in a privacy policy. In practice, that points to robots.txt and similar signals.

Does the EU AI Act affect price scraping?

Not directly. The AI Act doesn't regulate price monitoring as such.

But if you train and release a general-purpose AI model on scraped data, Article 53 has required a copyright policy that respects machine-readable opt-outs since August 2025. Germany's BGH is also considering sending text-and-data-mining questions to the CJEU.

Is price scraping legal in Germany?

Generally yes, for freely available data. In 2014, the BGH said scraping public flight data wasn't unfair competition, even though the airline's terms banned it.

Getting around technical protection, ignoring § 44b UrhG opt-outs or copying a substantial part of a protected database changes that.

Can a competitor stop me from scraping their prices?

Yes, in several ways. They can block bots, publish a machine-readable opt-out, rely on terms you've accepted, or sue under database or unfair competition law.

If they've clearly blocked you, carrying on is one of the fastest ways to turn a legal activity into an illegal one.

Conclusion: Legal, Scalable Competitor Price Monitoring in 2026

Price scraping is legal in the EU when you stay in your lane.

That means public pages, factual data, polite crawling, respected opt-outs, and using the data for your own decisions.

The court cases line up neatly:

• Ryanair: website terms can restrict you, even without a database right.
• Innoweb and CV-Online: systematic copying can infringe.
• The BGH: beating technical barriers is the real red line.
• BoligPortal: machine-readable opt-outs now carry legal weight.

Keep an eye on three things over the next year: the BGH's LAION decision (or its referral to the CJEU), Norway's new copyright law, and more Nordic rulings on opt-outs.

And if you'd rather not build all this yourself, ScrapeWise.ai runs managed price monitoring for Nordic and DACH retailers on exactly these principles.