The same individuals that have a lawyer on their side, but not having it doesn't mean we can break the laws.
Of course, if you're doing something not completely fair by scraping for yourself and not for commercial use, it's more difficult to catch you and probably you'll risk only a ban, but when it comes to businesses, you're playing with fire.
Certainly a fair point that individuals won't have a data protection professional. But individuals are not subject to GDPR. GDPR only applies to businesses, so only businesses would need to conduct things like legitimate interest and data impact assessments. I understand that for small business this still may present issues, but you'll want to do your best.
It would still likely apply, as you're doing it in a business capacity. But the company you are getting the data for would likely have more obligations as the controller.
Quick reality check... How many individuals have "data protection professional" on their side?
The same individuals that have a lawyer on their side, but not having it doesn't mean we can break the laws.
Of course, if you're doing something not completely fair by scraping for yourself and not for commercial use, it's more difficult to catch you and probably you'll risk only a ban, but when it comes to businesses, you're playing with fire.
Certainly a fair point that individuals won't have a data protection professional. But individuals are not subject to GDPR. GDPR only applies to businesses, so only businesses would need to conduct things like legitimate interest and data impact assessments. I understand that for small business this still may present issues, but you'll want to do your best.
What if I'm running Gigs on upwork, fiverr?
It would still likely apply, as you're doing it in a business capacity. But the company you are getting the data for would likely have more obligations as the controller.