Ninth Circuit Defines AI Web Scraping Boundaries Under CFAA
Ninth Circuit rules AI agents acting under user direction don’t violate CFAA.
Why it matters: This decision clarifies when AI-driven web scraping crosses legal lines, guiding AI developers and legal teams managing automated access risks.
- On August 4, 2026, Ninth Circuit vacated an injunction against Perplexity AI in Amazon.com Services, LLC v. Perplexity AI, Inc.
- Court ruled Perplexity’s AI agent is a tool used by the user, so the user accesses Amazon’s computers, not Perplexity.
- Decision means AI agents acting under user control are not liable for unauthorized access under the CFAA.
- Case number 26-1444 sets a legal precedent for AI scraping and automated web access statutes.
In a landmark ruling on August 4, 2026, the U.S. Court of Appeals for the Ninth Circuit delivered its decision on Amazon.com Services, LLC v. Perplexity AI, Inc., case number 26-1444, a significant case interpreting the Computer Fraud and Abuse Act (CFAA) in the context of AI-powered web scraping.
The court vacated a preliminary injunction against Perplexity AI, concluding that Amazon was unlikely to succeed on its CFAA and California CDAFA claims. Central to the ruling was the court's clarification that when a user employs Perplexity's AI agent—specifically the Comet Browser AI Assistant—to navigate Amazon’s website, it is the user, not Perplexity AI, who is considered accessing Amazon’s systems. This distinction hinges on the fact that the AI agent acts merely as a tool operated by the user, rather than as an independent actor directly breaching access restrictions.
This interpretation means that accusations of "unauthorized access" under the CFAA cannot be directed at the AI agent's provider if the agent merely facilitates user-directed interactions. Demian Ahn, a partner at Wilson Sonsini Goodrich & Rosati, summarized the decision's significance: "The Ninth Circuit's decision underscores that AI agents, when acting at a user's direction, do not constitute unauthorized access under the CFAA."
This ruling is pivotal for AI developers and corporations relying on automated web tools, providing clearer legal boundaries and reducing uncertainty about liability when AI systems access third-party websites at user direction. However, the decision leaves open questions about how this framework may apply in other jurisdictions and under varying website terms of service.
For legal professionals managing AI-driven operations, this case offers an essential precedent on how courts may treat automated tools under computer fraud statutes, impacting compliance strategies and risk assessments in legal tech environments.
By the numbers:
- August 4, 2026 — Date of the Ninth Circuit decision
- 26-1444 — Case number for Amazon.com Services, LLC v. Perplexity AI, Inc.
Yes, but: The ruling addresses only Ninth Circuit jurisdiction and does not resolve how other circuits or jurisdictions will interpret AI agents' access under the CFAA.
What's next: Watch for possible appeals or analogous cases in other circuits that may further define CFAA's scope regarding AI tools.