In my case I was able to get activation codes for product I hadn't purchased, but yeah, once personal information is involved, its a whole different game. Ther

In my case I was able to get activation codes for product I hadn't purchased, but yeah, once personal information is involved, its a whole different game. There was a lawsuit in Norway a while back were the question essentially was: are you breaking the law if you change the URL? (no, it wasn't). More specifically, a guy logged into Norways DMV and looked up information about his own car and by changing the license plate in the URL he got information about other cars, including their owner. I guess the triggering factor was that he scraped this information into a big database. In Norway you can freely look up car information based on license plate, but it cost extra (?) to get the name of the owner. So the information wasn't secret in any way. But that brings us back to the question: where does the line go when scraping the web for information?