Are Proxies Legal? Proxy and Web Scraping Law Explained

The short answer

Yes — using a proxy server is legal in most countries, and businesses use them every day. The law looks at what you do through it: accessing systems without permission, breaking a contract you agreed to, mishandling personal data or committing fraud is unlawful with or without a proxy. A few countries also restrict tools used to evade their network controls. This is general information, not legal advice.

The proxy isn't the question — the use is

A proxy is plumbing: it forwards requests from one address instead of another. Companies use proxies for security, testing, market research, ad verification and data collection. No major jurisdiction prohibits proxies in general. What can be illegal is the activity — and using a proxy to hide an illegal activity can make things worse, not better.

Computer-misuse law (US: the CFAA)

In the US, the Computer Fraud and Abuse Act prohibits accessing a computer "without authorization" or "exceeding authorized access". In Van Buren v. United States (2021), the Supreme Court read "exceeds authorized access" narrowly: it covers getting into parts of a system that are off limits to you, not using information you're allowed to reach for a purpose the owner dislikes.

For data collection, the practical line is between public pages anyone can see and areas behind a login or other access barrier. Getting past a password wall you have no right to cross is a very different legal question from loading a public page.

Website terms of service

Terms of service are contracts, and courts enforce them against people who agreed to them. In hiQ Labs v. LinkedIn, the long-running scraping case ended in December 2022 with an agreed $500,000 judgment against hiQ that included breach of LinkedIn's user agreement, with the use of fake accounts a central issue.

Context matters, though. In Meta Platforms v. Bright Data (January 2024), a federal court in California granted summary judgment for Bright Data, holding that Meta's terms didn't prohibit logged-off scraping of public data. The pattern: if you log in, you've likely accepted the terms; if you only access public pages, the terms may not bind you the same way.

Personal data

Data protection law applies to personal data whether or not it is publicly visible. Under the EU and UK GDPR, collecting information about identifiable people needs a lawful basis, has to be proportionate and comes with obligations to the people concerned. Product prices, search rankings and ad placements are not personal data; profiles, names and contact details are.

Countries with specific rules

Some countries regulate tools for getting around network controls. In the United Arab Emirates, Article 10 of Federal Decree-Law No. 34 of 2021 punishes using a third-party IP address or other means to commit or conceal a crime with imprisonment and fines of AED 500,000 to 2 million; using a VPN or proxy for lawful purposes is not itself the offence. Other countries restrict unlicensed circumvention tools. If you operate in a country with network controls, check local law before routing traffic through it.

Using proxies responsibly

Collect public data; don't get around logins, paywalls or access controls you have no right to pass.
Don't create fake accounts to reach data.
Keep request rates reasonable so you don't degrade the site.
Treat personal data under the data-protection law that applies to it.
Choose a provider whose residential IPs are sourced with consent.

SerpProxies' acceptable use policy sets out what our network may and may not be used for. When in doubt about a specific project, ask a lawyer in the relevant jurisdiction.

At a glance

Common proxy uses and the legal questions they raise
Activity	Usually lawful?	Main legal question
Collecting public prices, rankings, listings	Usually lawful?Generally yes	Main legal questionSite terms if you've agreed to them; request volume
Ad verification and brand protection	Usually lawful?Generally yes	Main legal questionSite terms
Scraping behind a login	Usually lawful?Riskier	Main legal questionTerms you accepted; computer-misuse law
Collecting personal data	Usually lawful?Depends	Main legal questionGDPR and other data-protection law
Fake accounts, fraud, evading bans	Usually lawful?No	Main legal questionContract, fraud and computer-misuse law

General information as of October 2026, not legal advice.

Products in this guide

Put it into practice

Try it on a real target, free

Up to 2 GB of residential traffic, no card. HTTP(S) and SOCKS5, rotating or sticky, country to city targeting — all on one gateway.

Claim the free trial See pricing

Are Proxies Legal: questions

In most countries, yes. Proxies are a standard networking tool. The legality of what you do through one is judged on its own.

Scraping publicly available data is generally lawful in the US, as cases like Meta v. Bright Data show, but logging in, ignoring terms you've accepted, using fake accounts or collecting personal data each raise separate legal questions.

Yes, when the IPs are sourced with the owners' informed consent. Networks built from hijacked or unknowingly enrolled devices are a different matter — that's why a provider's stated consent basis matters.

Using a VPN or proxy for lawful purposes isn't itself the offence; Article 10 of Federal Decree-Law No. 34 of 2021 targets using another IP address to commit or conceal a crime. Check current local guidance.

Not for public pages in most cases, but a site's terms, robots.txt and rate limits signal what the owner expects, and terms you've agreed to by creating an account can be enforced.

Keep reading