1. You need consent to handle PII (doesn't matter that you scraped it) 2. Massive fines for data breaches
Good luck!