The Federal Trade Commission today opened public comment on a proposed enforcement policy statement declaring that businesses which set prices from personal data without telling consumers are likely violating Section 5 of the FTC Act. The Commission approved the Federal Register notice 2-0, and comments will be accepted for 30 days once the notice publishes.

The document does not create a rule. It does not ban anything. What it does is announce where the agency intends to point its enforcement resources, and it says so in unusually direct terms: the failure to disclose that a price has been personalized, along with the basis for that personalization and the types of data behind it, "is likely to constitute an unfair or deceptive act or practice in violation of Section 5," according to the proposed statement.

That sentence is the whole of the matter for anyone whose business touches consumer data, pricing systems, or the pipes that connect the two.

A statement of intent, not a prohibition

The Commission is explicit about the limits of its own authority. Congress has not given it the power to prohibit personalized pricing in all circumstances, the statement says, but the agency intends to enforce aggressively against any personalized pricing practice that violates Section 5 or any other law it administers.

FTC Chairman Andrew Ferguson framed the consumer expectation that the statement rests on. "When consumers see a listed price, they expect it to be same price that everyone else sees, not the retailer's estimate of how much they are willing to pay based on their personal data," Ferguson said, according to the announcement. He added that businesses failing to tell consumers how their personal data is being used to set a price "may be in violation of the FTC Act and other laws we enforce," and described the draft as putting companies engaged in or considering personalized pricing on notice.

The statement itself closes with a formal disclaimer that constrains how far it reaches: it does not confer any rights on any person and does not operate to bind the Commission or the public. In any enforcement action, the agency must still prove that a challenged practice violates an existing statutory or regulatory requirement.

Where the line sits between varying prices and personalized prices

Prices vary for many reasons the Commission treats as unremarkable. Supply and demand shift for everyone in a market. Those shifts can be intensely local: the statement notes that rideshare prices differ when supply and demand in one neighbourhood diverge from an adjoining one. Taxes, regulation, and market conditions vary by region. And some products carry prices that necessarily turn on individual characteristics, because that is the nature of the product. Insurance premiums and credit terms are the examples given, since both must reflect the risk of covering or lending to a specific person.

What the statement identifies as new is the application of that individualized logic to goods and services where it has never applied. When a shopper walks into a store, according to the document, the reasonable expectation is that the shelf price is the price offered to anyone else in the same store at the same time. The same expectation carries over to a product listing on a retailer's website. Those expectations feed into decisions about where to shop, whether to comparison shop, and how to approach a purchase at all.

Personalized pricing, defined in the announcement as the use of personal data to set prices according to what a company believes an individual consumer is willing to spend, breaks that assumption without announcing itself.

Nothing in the proposal invents a new standard. It applies the Commission's 1984 deception and unfairness frameworks to a newer commercial practice.

An act is deceptive if it involves a representation, omission, or practice that is material and likely to mislead a consumer acting reasonably in the circumstances, to that consumer's detriment. The three-part structure has been adopted across most federal appellate circuits, and the statement cites decisions from the Second, Fourth, Sixth, Seventh, Ninth, Tenth, and Eleventh Circuits in support.

An act is unfair if it causes or is likely to cause substantial injury that consumers cannot reasonably avoid and that is not outweighed by countervailing benefits to consumers or competition, the standard codified at 15 U.S.C. § 45(n).

Applied to pricing, the deception theory runs in two directions. A retailer may deceive by representing, expressly or by implication, that a price is static or widely offered when it is in fact personalized. A retailer may also deceive by omission, where a consumer reasonably believes a price is static and the merchant says nothing to the contrary. Both are treated as likely material, on the reasoning that a consumer who does not know a price has been personalized cannot take steps to avoid the result. The statement lists what those steps might look like: using a virtual private network, browsing privately, switching to a retailer with uniform prices, or abandoning the transaction.

A second deception theory concerns the stated basis for a personalized price. A consumer who believes a personalized price is a loyalty discount, when it is in fact a higher price derived from estimates of disposable income or shopping behaviour at other firms, has been given a reason not to act. Tricked into forgoing alternatives, in the statement's phrasing, that consumer pays more than would otherwise have been necessary.

The unfairness theory tracks the same facts. A higher price may be substantial injury. It is not reasonably avoidable where the fact or nature of the personalization has been concealed, because the consumer lacks the information needed to change behaviour, dispute inaccurate data driving the price, or prevent that data from being collected in the first place. And any benefits from personalized pricing, the Commission argues, can be realized without concealing that the pricing is personalized at all.

The statement also flags two adjacent instruments. The Restore Online Shoppers' Confidence Act bars charging for subscriptions without express informed consent and requires clear disclosure of material terms before payment information is taken. The Rule Against Unfair or Deceptive Fees, at 16 C.F.R. Part 464, governs fee disclosure in live-event ticketing and short-term lodging. Some potential Section 5 violations identified in the document may also breach those requirements.

What a sufficient disclosure looks like

The proposal sets a specific bar, and it is higher than a label. A disclosure is described as effective when it is clear and conspicuous and includes the fact that the price is personalized, the basis of the personalization, and the type of data used.

Telling a consumer only that a "specially selected" price is on offer would likely be misleading, according to the statement, because it omits the information that matters. By contrast, the document describes a disclosure stating that a personalized price is based on estimated willingness to pay derived from that consumer's previous purchases from the same retailer through the same login account. If accurate and complete, that formulation would likely dispel any reasonable expectation of a uniform price and give the consumer enough to identify wrong information, take avoidance measures, or stop the data collection that feeds the pricing.

Seven scenarios the Commission put on paper

The statement includes a non-exhaustive list of situations where personalized pricing without adequate disclosure would raise Section 5 concerns. The examples are presented for discussion rather than as definitive legal conclusions, and they are notable for how specific they are:

  • A food delivery company quoting a higher price to consumers whose personal data suggests they are less able or less likely to leave home to buy food.
  • A grocery chain charging a delivery customer more for milk based on data showing several children in the household.
  • A hotel charging more where data suggests the consumer is travelling for a funeral or other unavoidable personal business.
  • A rideshare company charging more because data reveals the user has not installed any competitor apps.
  • A rideshare company charging more for transport to a medical facility based on data suggesting a life-threatening emergency or condition.
  • A retailer charging more for a home-security camera system based on court filings showing the customer was recently the victim of a crime.
  • A retailer charging more on its website when data shows the consumer is physically inside one of its stores or parking lots while browsing.

Each example describes an inference drawn from data that was almost certainly collected for a different stated purpose. That is the connective tissue between this statement and the advertising data economy.

Data practices attached to personalized pricing carry their own exposure, according to the document. The Commission notes it has applied Section 5 to consumer data privacy for years, and identifies two distinct failure modes.

The first is collecting, using, or disclosing personal data for the purpose of personalized pricing without adequate disclosure or without obtaining consent. The second is more demanding: basing personalized prices on consumer data without sufficiently verifying that consumers consented to the collection of that data for that purpose.

That second formulation traces to a December 2024 concurrence concerning location data brokers, cited in the statement, which addressed liability for selling precise location information without sufficiently verifying that the consumers who generated it had consented to its collection by the applications that gathered it. The precedents assembled around it are all data cases rather than pricing cases: a 2018 complaint over preinstalled ad-injecting software acting as an intermediary between consumers and every website they visited, a 2017 action over collection of television viewing activity without consent, and two rent-to-own matters from 2013 and 2014 involving monitoring software on rented computers.

Verification duties of this kind are familiar territory for anyone who has audited a data supply chain. What changes is the downstream use. A segment that was licensed for audience targeting and then applied to price-setting arrives in a different regulatory posture, because the pricing use is the one the consumer never anticipated.

Regulated markets as the template

To support its reading of Section 5, the Commission points at markets where personalized pricing is already routine and already disclosed. The Fair Credit Reporting Act, at 15 U.S.C. § 1681m(a), requires notice when an adverse action such as a higher price is based on a consumer report, and requires the specific basis to be identified, with a free copy of the report available so inaccuracies can be disputed. Many state insurance laws impose comparable obligations, and the statement cites provisions in California, Virginia, and Washington.

The common thread is that disclosure improves a consumer's ability to avoid injury from prices founded on incorrect data or on behaviour that can be changed. That is the function the Commission wants disclosure to serve in retail.

The evidence base is thinner than the rhetoric

The proposal is candid about what is not known. The extent to which businesses currently use personalized pricing is not well understood, according to the statement, and the effects on consumers are unclear.

In theory, perfect personalized pricing without competition would let a monopolist capture the entire consumer surplus. Real-world implementations would be imperfect at identifying consumers and estimating willingness to pay, and in most circumstances would face competitive pressure limiting pricing power. The limited economic literature the Commission assembles suggests personalized pricing is likely to raise business profits, that gains to some consumers come with losses to others, and that the more sophisticated the practice becomes, the less likely consumers are to benefit.

One cited finding cuts against intuition. Research published in the American Economic Review in 2024 concluded that when only some companies in a market can personalize prices, consumers can end up worse off than when either all of them do or none of them do. Partial adoption, in other words, may be the worst configuration.

Consumer perception research points the same way. A 2020 study cited in the statement found that more granular price individualization negatively affects fairness perceptions, and that buyers judge price differentiation across individuals as less fair than segment-level pricing built on less identifying information.

Public understanding of the underlying data flows remains limited. The statement cites Pew Research finding that 67% of the American public reported understanding little to nothing about what companies do with their personal data, up from 59%.

What the Commission declined to decide

One passage matters as much for its silence. The Commission states that it declines at this time to take any position on whether some personalized pricing practices are unfair even when fully disclosed to consumers.

That leaves the harder question open. A disclosed practice that still extracts higher prices from consumers identified as having fewer alternatives remains, for now, outside the scope of what the agency has committed to.

Procedural posture

The Federal Register notice was authorized on a 2-0 Commission vote. Public comments will be accepted electronically for 30 days once publication occurs. The announcement situates the proposal within a run of actions against businesses that mislead consumers with hidden fees and surprise charges, and within executive orders addressing cost-of-living issues, including orders on prescription drug pricing, live entertainment markets, banking, food supply chain price fixing, and fraud.

The footnotes assemble that enforcement record: a $10 million refund arrangement with StubHub announced on April 9, 2026 over deceptive ticket pricing; a $60 million consumer refund settlement with Instacart announced on December 18, 2025; a $24 million resolution with Greystar on December 2, 2025 over rent price advertising; a joint action with the Maryland Attorney General against Lindsay Auto Group on April 2, 2026; the Fees Rule taking effect on May 12, 2025; a proposed rulemaking on rental housing fees issued on March 12, 2026; and a request for comment on fee practices in online food and grocery delivery issued on April 14, 2026.

Why this lands on the marketing industry

The distinction the industry has relied on for a decade is that personalizing an advertisement is not the same as personalizing a price. That distinction survives this document. Nothing in the statement addresses ad targeting, creative variation, or promotional segmentation as such.

What it does is attach regulatory consequence to the point where an inference derived from behavioural data reaches the price field. And the infrastructure that produces those inferences is the same infrastructure that serves advertising. Amazon built Dynamic TV Creative on Prime Video around viewer shopping behaviour, launched on May 11, 2026, using an authenticated identity graph. Microsoft Advertising and Epsilon brought transaction-derived targeting into search campaigns in January 2026, drawing on consumer relationships with brands, retailers, and financial institutions that may never have disclosed advertising uses. Retail media networks sit directly on purchase histories. The statement's grocery milk example turns on precisely the kind of household composition signal those systems trade in daily.

The consent verification language is the sharper edge. The Commission has warned before that hashed identifiers do not render data anonymous, a position covered in July 2024. A duty to verify that consumers consented to collection for the specific purpose of price-setting would push audit obligations back through data brokers, clean rooms, and identity resolution layers that were never designed to carry purpose limitation downstream.

Context around the proposal has been building for two years. The Commission opened a 6(b) study of surveillance pricing intermediaries in July 2024, issuing orders to Mastercard, Revionics, Bloomreach, JPMorgan Chase, Task Software, PROS, Accenture, and McKinsey. Google's Universal Commerce Protocol launch in January 2026 triggered a public argument over whether merging search history, conversational AI data, and retailer information enables personalized upselling, a characterization Google disputed. The Senate held its first hearing on surveillance pricing on August 4, 2026, with bipartisan hostility, while state and city measures advanced.

The statement arriving today converts that accumulated attention into a stated enforcement posture. It is not law. It is a description of what the agency believes existing law already prohibits, published with an invitation to argue about it for 30 days.

Timeline

  • July 23, 2024 - The FTC issues 6(b) orders to eight companies offering surveillance pricing products, including Mastercard, JPMorgan Chase, Accenture and McKinsey. Coverage on PPC Land
  • July 2024 - The Commission warns that hashed data is not anonymous and that anonymity claims risk deception liability. Coverage on PPC Land
  • December 3, 2024 - A Commission concurrence in two location data broker matters sets out the consent verification theory later cited in the pricing statement
  • May 12, 2025 - The Rule on Unfair or Deceptive Fees takes effect
  • December 2, 2025 - Greystar agrees to pay $24 million over deceptive rent price advertising
  • December 18, 2025 - Instacart agrees to $60 million in consumer refunds to settle an FTC lawsuit
  • January 11, 2026 - Google launches the Universal Commerce Protocol; criticism follows that the system enables surveillance pricing. Coverage on PPC Land
  • January 13, 2026 - Google responds to the pricing criticism, stating merchants cannot show prices higher than those on their own sites. Coverage on PPC Land
  • March 12, 2026 - The FTC issues a proposed rulemaking on rental housing fee practices
  • April 2, 2026 - The FTC and Maryland Attorney General secure refunds and penalties against Lindsay Auto Group over deceptive pricing
  • April 3, 2026 - The FTC publishes its 2026-2030 strategic plan naming deceptive advertising and privacy as enforcement priorities. Coverage on PPC Land
  • April 9, 2026 - StubHub begins refunding $10 million in fees over deceptive ticket pricing
  • April 14, 2026 - The FTC seeks comment on fee practices in online food and grocery delivery
  • July 1, 2026 - The Commission approves a separate proposed policy statement on accuracy suppression in AI systems, also on a 2-0 vote. Coverage on PPC Land
  • July 2, 2026 - The FTC settles with Hopper for $35 million over hidden booking fees. Coverage on PPC Land
  • August 4, 2026 - The Senate holds its first hearing on surveillance pricing. Coverage on PPC Land
  • August 19, 2026 - The FTC approves the proposed personalized pricing enforcement policy statement 2-0 and opens a 30-day comment period upon Federal Register publication

Summary

Who: The Federal Trade Commission, chaired by Andrew Ferguson, issued the proposed enforcement policy statement. It affects retailers, delivery and rideshare operators, hotels, and the data brokers, measurement firms and advertising platforms whose inferences could be applied to price-setting.

What: A proposed enforcement policy statement declaring that personalized pricing without clear and conspicuous disclosure of the personalization, its basis, and the data behind it is likely an unfair or deceptive act under Section 5 of the FTC Act. It includes seven illustrative scenarios, extends Section 5 data privacy theories to pricing use cases, and declines to decide whether fully disclosed personalized pricing can still be unfair.

When: Announced August 19, 2026. The Commission vote authorizing the Federal Register notice was 2-0. Comments will be accepted for 30 days after publication.

Where: United States, under Section 5 of the FTC Act, with supporting references to the Restore Online Shoppers' Confidence Act, the Rule Against Unfair or Deceptive Fees at 16 C.F.R. Part 464, the Fair Credit Reporting Act, and state insurance disclosure laws in California, Virginia and Washington.

Why: The Commission holds that consumers reasonably expect a posted price to be the same price shown to anyone else at the same place and time, and that concealing personalization prevents them from avoiding higher prices, correcting inaccurate data, or stopping its collection. The agency states it lacks authority to ban personalized pricing outright, so disclosure becomes the enforcement lever.