Why is the CFAA mentioned, then? That’s historically been used as a bludgeon against scraping.
“A US court ruled that Booking.com violated the Computer Fraud and Abuse Act by accessing part of Ryanair's website without permission, court documents showed, a ruling the airline said would help end unauthorised screen scraping by booking sites.”
Ryanair had previously send Cease & Desist letters to Booking.com so they were very explicitly unauthorized Booking.com from accessing their website.
The part that annoys me is the losses are redacted [1]. Judging by the length of the redaction its much more than the $5000 they were ultimately awarded. I'm also very unclear what harm will actually befall Ryanair if the losses weren't redacted.
I’m not a lawyer, and I haven’t kept up very closely with the movements in scraping legality, but my impression was that it was ruled in the past few years that if it’s on the public internet with no login-wall being circumvented, then CFAA isn’t applicable? I seem to recall a collective sigh of relief around some of those rulings.