The Federal Trade Commission spent August 19 telling American retailers something they may not have wanted to hear: the artificial intelligence quietly deciding what you, specifically, should pay for milk or a hotel room is already regulated. Not by an AI statute — there isn't one — but by Section 5 of the FTC Act, the unfair-or-deceptive-practices provision Congress wrote in 1914 and codified at 15 U.S.C. § 45. The Commission's proposed enforcement policy statement on personalized pricing argues that no new law is needed to reach a very new practice.
"When consumers see a listed price, they expect it to be same price that everyone else sees, not the retailer's estimate of how much they are willing to pay based on their personal data," Chairman Andrew N. Ferguson said in the announcement. "The FTC does not have the legal authority to ban personalized pricing in all circumstances, but businesses that fail to tell consumers how their personal data is being used to set a price may be in violation of the FTC Act and other laws we enforce."
Two precisions define how much this binds. This is formal Commission action, not one official's speech: the vote authorizing the Federal Register notice was 2-0, from an agency currently seated with only two commissioners. But it is a proposal, not final policy. The public has 30 days to comment at docket FTC-2026-1057, and the document disclaims itself in plain terms — it "does not confer any rights on any person and does not operate to bind the FTC or the public."
And the Robinson-Patman Act, often invoked in discussions of price discrimination, appears nowhere in it. The only other laws named are the Restore Online Shoppers' Confidence Act, 15 U.S.C. §§ 8401–8405, and the Rule Against Unfair or Deceptive Fees at 16 C.F.R. Part 464. The Fair Credit Reporting Act's adverse-action requirement, 15 U.S.C. § 1681m(a), appears as analogy rather than hook: Congress has already accepted disclosure as the price of individualized pricing in credit and insurance.
What the FTC says is actionable
The theory is disclosure. Where consumers reasonably expect a posted price not to vary by person, a business that personalizes must "clearly and conspicuously disclose not just that the price is personalized, but also the basis for that personalization and the types of data on which the personalization is based." Failure to do so is "likely to constitute an unfair or deceptive act or practice." Telling a shopper only that a price was "specially selected" would likely mislead, because it omits the mechanism.
Seven illustrative examples form the sharpest passage in the document. A food delivery company charging more to consumers its data suggests cannot leave home. A grocery chain charging more for milk because household data shows several children. A hotel raising a rate on someone whose data suggests a funeral trip. A rideshare firm charging more for a ride to a medical facility on data suggesting a life-threatening emergency.
The evidentiary base is thinner than the rhetoric. The FTC's January 2025 research summaries, drawn from 6(b) orders to eight pricing intermediaries, found those firms serving at least 250 clients across grocery, apparel and beauty, using signals as granular as mouse movements and abandoned carts. That study was never completed, and the statement now concedes that "the extent to which businesses currently use personalized pricing is not well understood."
Critics seized on the gap between the examples and the remedy. In a footnote, the FTC "declines at this time to take any position on whether some personalized pricing practices are unfair even when fully disclosed to consumers." Lindsay Owens of the Groundwork Collaborative said Ferguson "makes it clear that he'll let companies play semantics as long as they disclose what they're doing," adding that "a disclosed price can still be an unfair one." Grace Gedye of Consumer Reports urged regulators instead to "prohibit companies from using consumers' individual data to personalize prices in the first place."
Not everyone accepts the framing. Z. John Zhang, a Wharton marketing professor who testified at the August 4 Senate Judiciary subcommittee hearing on AI surveillance pricing, called the term a "misleading, unnecessarily prejudicial label for personalized pricing," which is "not intrinsically sinister, when viewed through the lens of economics."
Why It Matters
Pricing is where most people will first meet a model that has assessed them individually. Not a chatbot, not a résumé filter — a number on a checkout screen, computed from location, browsing history, inferred income and household composition. What matters about the FTC's move is that it reaches that number without waiting for AI legislation. The unfairness test at 15 U.S.C. § 45(n) asks whether an injury is substantial, not reasonably avoidable, and not outweighed by countervailing benefits. Concealment is what makes a personalized price unavoidable. That is the whole doctrinal move, and it required no new authority.
That is the general lesson for AI governance in the United States: the binding constraints on deployed models will likely be old consumer-protection statutes applied to new conduct, arriving years before any AI-specific bill. The limit is equally clear. A disclosure regime legitimises what it describes. If compliance means a line of text saying your price came from your data, the FTC has regulated the surprise, not the pricing.
What to Watch
Whether the final statement keeps or abandons that footnote is the most consequential open question; comments close roughly 30 days after Federal Register publication. Watch too for a first enforcement action naming a specific retailer, which would convert doctrine into precedent. The states are moving faster: New York's Algorithmic Pricing Disclosure Act, in effect since November 10, 2025, compels the words THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA, with penalties up to 1,000 dollars per violation, and California's AB 2564 would ban the practice outright. Senators Josh Hawley and Richard Blumenthal say they already have a legislative framework.
“The FTC does not have the legal authority to ban personalized pricing in all circumstances, but businesses that fail to tell consumers how their personal data is being used to set a price may be in violation of the FTC Act and other laws we enforce.”— Andrew N. Ferguson, Chairman, U.S. Federal Trade Commission