A narrower move than the headlines suggest
On August 19, 2026, the Federal Trade Commission voted 2-0 to publish a proposed enforcement policy statement on "personalized pricing" — the practice of using a consumer's personal data to estimate what they will pay and setting a price accordingly (FTC press release). The Commission's theory: a business that lets consumers believe they're seeing a standard, static price — while quietly varying it based on browsing history, location, device type, or purchase patterns — may be committing a deceptive or unfair practice under Section 5 of the FTC Act.
The agency was careful about what it was not doing. As Chairman Andrew Ferguson put it, "the FTC does not have the legal authority to ban personalized pricing in all circumstances, but businesses that fail to tell consumers how their personal data is being used to set a price may be in violation of the FTC Act and other laws we enforce." The comment period, originally set to close September 18, was extended a week to September 25, 2026 (FTC extension notice).
The case for disclosure rules
The strongest argument for the FTC's approach doesn't require believing that personalized pricing is inherently wrong — only that consumers can't rationally shop, compare, or push back against a practice they don't know is happening. If a retailer's checkout page implies a single fixed price while an algorithm is quietly pricing to each visitor's estimated willingness to pay, that gap between appearance and reality is a classic deception problem, not a novel one. The FTC's own 2025 Surveillance Pricing 6(b) study found that intermediary firms were building products explicitly designed to let retailers price individually based on granular behavioral signals — down to mouse movements and abandoned-cart data. Markets work when buyers can compare prices; opaque, individualized pricing erodes that comparison function even for people who never notice they're being charged differently than the person next to them.
Why the disclosure-only approach is the right one
Where the FTC gets it right is in choosing disclosure over prohibition. Personalized pricing is not, by itself, harmful — dynamic and segmented pricing is how airlines fill seats, how retailers clear inventory, and how student, senior, and loyalty discounts have worked for decades. An algorithm that offers a first-time visitor a discount to convert them, or prices a rural customer with higher shipping costs differently than an urban one, is not defrauding anyone. Congress has never given the FTC authority to ban price discrimination outright, and the Commission's statement correctly declines to invent that authority through a policy statement — a document that, unlike a rule, carries no binding force and creates no new legal obligation until tested in an actual enforcement action.
The risk is in the execution. "Clear and conspicuous" disclosure of personalization, its basis, and the categories of data used is a reasonable ask in principle, but it is also exactly the kind of standard that invites inconsistent enforcement. A grocery chain running a loyalty-app discount, a travel site adjusting fares by search history, and a lender pricing risk by behavioral data are different enough that a one-size-statement risks either chilling ordinary discounting (retailers scrub personalization rather than risk a Section 5 theory) or producing disclosures so boilerplate they tell consumers nothing — the same fate that befell cookie-consent banners after the GDPR.
The political continuity is notable
What's striking is who is doing the enforcing. Ferguson, now FTC chairman under a Republican majority, dissented from the release of the 2025 surveillance-pricing study when Democratic commissioners voted 3-2 to publish it, objecting to its timing and framing. Eighteen months later, his own Commission is using that same body of evidence to justify a disclosure mandate. That continuity suggests personalized-pricing scrutiny has become one of the few genuinely bipartisan threads in US tech policy — Senator Ruben Gallego's One Fair Price Act (S. 3387), introduced in the Senate on December 8, 2025, would go considerably further and ban surveillance-based individualized pricing outright, not just require disclosure of it. Compared to that bill, the FTC's policy statement is the more proportionate instrument: it uses existing deception authority rather than asking Congress for a new prohibition, and it leaves room for the practice to continue wherever it's disclosed.
What businesses should actually do
Companies using any data-driven pricing — from A/B-tested promotional codes to dynamic surge pricing — should treat September 25 as a deadline to weigh in, not just wait out. The comment record will shape whether the final statement narrows to cases with real deception (a claimed "standard price" that isn't) or sweeps in ordinary discounting and segmentation. Given the FTC's own admission that it lacks authority to ban the underlying practice, the sensible corporate response is not to abandon personalization but to make the disclosure genuinely legible — plain language on what data drives a price, not a link buried in a privacy policy. That is a low bar that preserves the efficiency gains of data-driven pricing while closing the actual deception gap the FTC has identified.