OSINT practitioners work with information that is publicly and lawfully accessible. That means no hacking, no bypassing passwords, no impersonation to gain access, and no harassment. Good OSINT respects privacy laws, platform terms of service, and the real-world consequences of publishing or sharing what you find.