惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

G
Google Developers Blog
Google DeepMind News
Google DeepMind News
Microsoft Security Blog
Microsoft Security Blog
Martin Fowler
Martin Fowler
MyScale Blog
MyScale Blog
The GitHub Blog
The GitHub Blog
I
InfoQ
A
About on SuperTechFans
GbyAI
GbyAI
宝玉的分享
宝玉的分享
爱范儿
爱范儿
博客园 - 【当耐特】
博客园 - 司徒正美
博客园 - 聂微东
P
Proofpoint News Feed
WordPress大学
WordPress大学
云风的 BLOG
云风的 BLOG
Last Week in AI
Last Week in AI
阮一峰的网络日志
阮一峰的网络日志
B
Blog RSS Feed
Jina AI
Jina AI
aimingoo的专栏
aimingoo的专栏
J
Java Code Geeks
博客园 - 叶小钗

Privacy & Cybersecurity Law Blog

FTC Rescinds 2021 Policy Statement on Health App Data Breaches EU Cyber Resilience Act Reporting Obligations Take Effect for Manufacturers Delaware Expands State Privacy Law Dutch DPA Fines Uber Over Automated Decisions Affecting Drivers European Commission Designates ChatGPT, Reddit, and Roblox Under the Digital Services Act China Issues New Rules on Cyberspace Security Inspection Court Approves Meta Settlement With 29 States Over Alleged Harms to Children and Teens New Jersey Enacts the Kids Code Act with Privacy-by-Default and Safety-by-Design Obligations White House Memorandum Establishes Framework for Government-Directed Private-Sector Cyber Operations FTC, California and Utah Sue Telehealth Company Hims & Hers for Deceptive and Unlawful Privacy Practices CalPrivacy Settles with Two Data Brokers over Registration Failures and Privacy Violations New York Attorney General Releases Final Rules for SAFE for Kids Act EDPB Adopts Guidelines on Anonymous Data, Web Scraping, and Blockchain China Publishes Official Q&A on Administrative Policies for Cross-Border Data Transfers Hawaii Enacts AI Companion Disclosure and Safety Law EDPB Calls for Review of EU-U.S. Data Privacy Framework After U.S. Supreme Court Decision on FTC Independence CNIL Issues FAQs on Recommendation for Tracking Pixels in Emails European Commission Issues Guidance on the Cyber Resilience Act European Commission Issues EU AI Act Transparency Guidelines EU Digital Omnibus on AI Enters Into Force Connecticut AG Leads Multistate Settlement With 23andMe Over 2023 Data Breach CalPrivacy Targets Gig Economy Tech Platforms in First CCPA Compliance Audit New Jersey Adopts New Data Broker Registration Regime and Sensitive Data Sale and Licensing Restrictions CISA Plans to Finalize Cyber Incident Reporting Regulations in September 2026 Illinois Governor Signs Frontier AI Model Law New Hampshire Amends the NHDPA to Prohibit the Sale of Children’s Personal Data Canada’s Proposed Social Media Ban for Children and Chatbot Regulation: Bill C-34’s Impact on Platforms European Commission Unveils Cybersecurity and AI Action Plan European Commission Refers Four Member States to CJEU Over NIS2 Transposition Delays EDPB Opens Public Consultation on New Personal Data Breach Notification Template
FTC Proposes Enforcement Policy Statement on Personalized...
2026-08-24 · via Privacy & Cybersecurity Law Blog

On August 19, 2026, the Federal Trade Commission announced that it is seeking public comment on a proposed enforcement policy statement regarding personalized pricing—the practice of using personal data to set prices based on what a company believes an individual consumer is willing to pay. The proposed policy statement outlines the FTC’s legal concerns with the practice and signals the agency’s intent to pursue enforcement actions against businesses that fail to make adequate disclosures to consumers.

Background

The proposed policy statement arrives amid a rapidly evolving regulatory landscape in which multiple states have enacted or introduced legislation targeting surveillance pricing. Maryland became the first state to enact a law directly prohibiting certain personalized pricing practices in the grocery sector, and New Jersey recently followed. Connecticut has amended its data privacy law to impose both disclosure requirements and substantive bans on surveillance pricing by retailers and third-party delivery services. New York also recently passed a bill prohibiting surveillance pricing. California’s Office of the Attorney General has launched an investigative sweep targeting businesses that use personal data for algorithmic pricing in potential violation of the California Consumer Privacy Act. Additional states, including Colorado and Illinois, also recently have considered legislation that would impose similar restrictions.

The FTC’s proposed policy statement represents the federal government’s most direct articulation to date of how existing consumer protection law applies to personalized pricing.

Key Provisions of the Proposed Policy Statement

The proposed policy statement emphasizes that consumers generally expect the prices they see to be the same prices offered to other consumers for the same product or service. According to the FTC, retailers who represent or imply that a price is static when it in fact varies by individual consumer are at risk of engaging in deceptive practices in violation of Section 5 of the FTC Act.

The statement further notes that the undisclosed collection or use of personal data for the purpose of setting personalized pricing could constitute both an unfair and a deceptive practice under the FTC Act. As FTC Chairman Andrew Ferguson stated in the announcement, “businesses that fail to tell consumers how their personal data is being used to set a price may be in violation of the FTC Act and other laws we enforce.”

The FTC also acknowledged the limits of its authority, noting that it “does not have the legal authority to ban personalized pricing in all circumstances.” Instead, the statement focuses on the disclosure obligations of businesses and the potential harms arising from opaque pricing practices. Specifically, the FTC observed that informed consumers might take protective measures, such as using a virtual private network, private browsing sessions, or simply avoiding retailers engaged in personalized pricing, if they were aware that their personal data was being used to set prices.

Public Comment Period

Once the statement is published in the Federal Register, interested parties will have 30 days to submit comments electronically. The FTC vote authorizing the Federal Register notice was 2-0.

Takeaways

The proposed enforcement policy statement is consistent with the broader trend of increased regulatory scrutiny of personalized and algorithmic pricing. While the FTC’s approach is disclosure-focused rather than prohibitory, it reinforces the message that businesses using consumer data to engage in personalized pricing face legal risk absent clear and conspicuous disclosures.

Businesses engaged in or considering personalized pricing practices should assess whether their current disclosures adequately inform consumers that personal data is being used to set prices. Companies should also monitor the FTC’s public comment process and the final policy statement, as well as the growing patchwork of state surveillance pricing laws, to ensure ongoing compliance across jurisdictions.