Yeah, you're not going to see me go after a PhD student at a low ranking university any time soon. Do you have any idea how stressful it is to be a PhD student? If she has done something illegal it's on her supervisor and ethic committee's heads. That's what those roles are for.
I'm not sure what being at a "low ranking university" has to do with anything here. Ethics is ethics, status is irrelevant. My PhD is from a "low ranking university" but the ethical bar was high (and my supervisors, like many academics at "low ranking universities", were top in their fields).
As I said above, as Eden has only been doing this PhD since last autumn, it's highly unlikely she's even got ethics clearance yet.
Bad research does need to be challenged, and what's clear here is that mass data scraping is enabling the proposed research, and mass data scraping is considered unethical (and not supported by the ICO) and may not be lawful.
Also, legal/illegal isn't a helpful bar for research ethics as research can be legal, whilst also unethical.