The Federal Trade Commission is likely to finalize its proposed enforcement policy statement on personalized pricing substantially as written, with its three-part disclosure test intact, by the end of the first quarter of 2027. The pattern of the last four weeks suggests that disclosure, not prohibition, is what becomes the operative national standard for how US retailers price by person, and that the first named enforcement action citing the statement is more likely to land on a food-delivery or grocery platform than on a general merchandise chain. The comment window on docket FTC-2026-1057 closes on September 25, 2026, and the signals that have accumulated since August 19 point in one direction.
In short
- Prediction: the FTC is likely to adopt a final personalized pricing policy statement by March 31, 2027, keeping the requirement to disclose the fact of personalization, its basis, and the data types used.
- Corollary: the first enforcement matter that leans on the statement is likely to target food delivery or grocery, the two categories the statement’s own examples single out, by mid-2027.
- Signal 1: a 2-0 Commission vote, a public comment docket, and a deadline extension to September 25 are the procedural fingerprints of a statement being built to survive, not to signal.
- Signal 2: the state ban track lost its flagship when California’s AB 2564 missed the August 31 concurrence deadline, while disclosure laws in Connecticut and New York are the ones actually going live.
- Signal 3: the House Oversight chairman asked for a briefing and endorsed “a final policy,” giving a Republican FTC bipartisan cover to finish the job.
Why this matters now
In June we argued that the operative limits on personalized pricing in the US would come from state legislatures rather than Washington, and that national retailers would drift toward a uniform non-personalized standard before the holidays. That call was half right. The states did move first, and four of them now have laws on the books. But the federal government has since re-entered the field in a form nobody quite expected in the spring: not a rule, not a ban, but an enforcement policy statement put out for public comment.
The distinction matters for anyone who runs pricing for a US retailer or marketplace. A ban tells you what you cannot do. A disclosure standard tells you what you must say, and it leaves the practice itself legal. The two produce very different compliance programs, very different vendor contracts, and very different holiday-season decisions.
The question for the next six months is which of the two becomes the de facto national floor, and the evidence now leans toward disclosure.
There is also a timing reason to pay attention. Connecticut’s disclosure and ban provisions take effect on October 1, 2026, the FTC docket closes on September 25, and the New Jersey grocery ban’s enforcement provisions do not bite until August 1, 2027. The federal statement, if finalized on the timeline we expect, would land in the gap between those dates and shape how retailers read all of them. Our earlier piece on the state-first thesis set out the legislative map; this one tracks what has changed since.
Signal 1: the FTC’s proposed policy statement and a docket built to last
On August 19, 2026, the Commission voted 2-0 to publish a proposed Enforcement Policy Statement Regarding Personalized Pricing and to open it for public comment. The document is short, eight pages, and its core is a single sentence: where consumers reasonably expect that prices will not vary by their personal data, businesses that personalize prices “should clearly and conspicuously disclose not just that the price is personalized, but also the basis for that personalization and the types of data on which the personalization is based.” The failure to do so, the statement says, “is likely to constitute an unfair or deceptive act or practice in violation of Section 5.”
Three features of the text tell you what kind of document this is. First, it concedes at the outset that “Congress has not given the Commission the authority to prohibit personalized pricing in all circumstances.” That is a deliberate narrowing: the FTC is not claiming a power it would have to defend in court. Second, it builds the legal theory on the 1984 Deception and Unfairness Policy Statements and a string of circuit court citations, which is how the agency writes when it expects to litigate. Third, footnote 20 records that the Commission “declines at this time to take any position on whether some personalized pricing practices are unfair even when fully disclosed.” The door to a future ban theory is left ajar, but the statement itself walks through the disclosure door.
The examples are the tell for where enforcement is likely to start. Of the seven scenarios listed, two involve food delivery (a higher price for consumers the platform believes cannot leave home; a grocery delivery customer charged more for milk because data shows several children in the household), two involve rideshare, one a hotel, and two general retail. Per the FTC’s own press release, Chairman Ferguson framed it in consumer terms: “When consumers see a listed price, they expect it to be the same price that everyone else sees.” Our coverage of the original 30-day comment clock walked through the disclosure test in detail.
Then, on September 4, the agency extended the comment deadline by a week, to September 25. Extensions are routine, but in this context they matter: an agency that wanted a symbolic statement would issue it directly, as the FTC did with its 2023 biometrics policy statement and its 2021 negative option statement, neither of which went out for comment. Seeking comment, then extending the window, is the behavior of an agency building an administrative record it expects to point to later. We noted at the time that the extension to September 25 gave retailers more room to file, and the trade associations appear to be using it.
Signal 2: the state ban track stalled where it mattered most
California’s AB 2564 was the bill the retail industry feared. It would have prohibited using a shopper’s personal information to set an individualized price, in the largest state economy in the country, with the usual California effect of becoming a national default by way of engineering convenience. It passed the Assembly in May, cleared the Senate 22-14 in late August, and then needed a concurrence vote in the Assembly by midnight on August 31, the last day of the session. The Assembly did not take it up.
As reported by Gizmodo and the Sacramento Bee, the bill died on the calendar, with the California Retailers Association and the state Chamber of Commerce having argued that a ban would sweep in individualized discounts and loyalty rewards.
That was the second large-state loss for the prohibition camp this summer. Colorado’s governor vetoed HB 26-1210 in June, a bill that would have barred data analytics from setting individualized prices and wages. Illinois has companion bans pending, and Washington has a pair of companion bills, but neither state has enacted. According to Arnold & Porter’s September advisory, more than 40 personalized pricing bills are pending across two dozen states, which sounds like momentum until you notice that the ones actually reaching governors’ desks are the disclosure-shaped ones.
Consider what is going live. Connecticut’s omnibus privacy amendments take effect October 1, 2026, and require the label “THIS PRICE WAS INCREASED BY A PRICE SETTING DEVICE USING YOUR PERSONAL DATA,” alongside a ban limited to retail sellers and third-party food delivery, with carve-outs for retention discounts and legitimate business factors such as shipping cost, delivery timing, inventory, and demand. New York’s Algorithmic Pricing Disclosure Act already requires “THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA.” New Jersey’s Fair Price Protection Act, signed July 23, is a grocery ban, but its enforcement provisions wait until August 1, 2027, and its electronic shelf label moratorium starts February 1, 2027. We covered the October 1 Connecticut go-live and the New Jersey grocery ban separately.
Line those up and the pattern is visible: the laws that are in force in 2026 are disclosure laws, the bans that are enacted are sector-limited and delayed, and the broad bans lost their two biggest chances. That does not mean the ban track is dead; California’s next session opens December 7, and New York’s One Fair Price Act passed both chambers in June and awaits the governor. But it means that on the day the FTC finalizes its statement, the federal disclosure test will be the widest-reaching standard in force, and the one most compliance teams design around.
Signal 3: bipartisan cover from the House and a lobbying front that has already conceded the point
On September 9, House Oversight Chairman James Comer wrote to the FTC requesting a staff-level briefing on the proposed statement. The letter, as reported by The Center Square, says the committee “supports a final policy that reflects a clear, workable, and well-supported legal framework” and observes that “consumers are frequently unable to determine whether or how their personal data is being used to determine the price they are charged.” It named Amazon, Walmart, Lyft, Target, and Kroger as companies whose data practices the committee has examined.
The wording is worth reading twice. “Supports a final policy” is not “supports a rule” and not “supports a ban.” It is an endorsement of the exact instrument the FTC chose, from the Republican chairman of the committee that oversees the agency. Add the December 2025 bipartisan Senate letter led by Senator Warner urging the FTC to act before the holiday season, and the May 2026 House Energy and Commerce inquiry to 25 retailers, and the agency now has cover from both chambers and both parties to finish. Regulators rarely finalize into a headwind; here there is a tailwind.
The industry side has, in effect, conceded the disclosure ground while fighting the ban ground. Bloomberg Law reported on August 17 that more than 30 companies across grocery, food retail, technology, and rental housing had been targeted by congressional inquiries this year, and that Uber was lobbying against bans on the argument that they would eliminate targeted discounts and interfere with operational pricing. Kroger, Lyft, and JetBlue said in statements that they do not engage in surveillance pricing. None of the public statements we could find attacks the idea of disclosure itself; a trade group that objects to being told what it cannot do, but not to being told what it must say, is signalling which outcome it can live with.
What the pattern suggests
Put the three signals together and the shape of the next six months is reasonably clear. The FTC has chosen the one instrument that its two sitting commissioners, the consumer groups, and most of the affected industries can all tolerate: a disclosure obligation grounded in existing deception law. It has opened a docket, extended it, and will close it on September 25 with a record that includes state attorneys general, Consumer Reports, EPIC, the Consumer Federation of America, and the retail trade associations. The path from a closed docket to a final statement does not require a Federal Register rulemaking, an economic analysis, or a congressional review period.
The timing precedent for FTC policy statements is short. The agency’s 2022 Section 5 unfair methods of competition statement was issued directly. Its 2021 negative option enforcement statement was issued directly in October of that year. The exception is the surveillance pricing 6(b) study itself: orders went to eight intermediaries in July 2024, staff issued a “perspective” on January 17, 2025, and the incoming chairman withdrew the request for public comment on January 22, 2025, criticizing the outgoing majority for “slowly dripping out information.” That history explains the current caution: Ferguson’s FTC is building this statement the way he said the last one should have been built, with a complete record before conclusions.
A record closing in late September, staff analysis through the fourth quarter, and a Commission vote in the first quarter of 2027 is the ordinary cadence.
| Signal | Observed | Date | What it points to | Strength |
|---|---|---|---|---|
| FTC proposed statement, 2-0 vote, docket FTC-2026-1057 | Disclosure test; concedes no ban authority; litigation-grade citations | Aug 19, 2026 | Statement designed to be finalized and used in cases | High |
| Comment deadline extended | Sep 18 moved to Sep 25 | Sep 4, 2026 | Agency building a record, not a press release | Medium |
| California AB 2564 dies | Senate 22-14, no Assembly concurrence by Aug 31 | Sep 1, 2026 | Broad ban track loses its flagship state | High |
| Connecticut disclosure law goes live | Mandatory label plus sector-limited ban | Oct 1, 2026 | Disclosure is the format actually in force | Medium |
| House Oversight letter | Chairman “supports a final policy” | Sep 9, 2026 | Bipartisan cover to finalize | Medium |
| Industry lobbying posture | Uber fights bans; Kroger, Lyft, JetBlue deny the practice | Aug 17, 2026 | Disclosure ground conceded | Medium |
What the pattern does not suggest is a rapid enforcement wave. The statement says the Commission “will not hesitate to bring enforcement actions in the public interest,” but Section 5 cases take months to build and usually start with civil investigative demands. The realistic sequence is: final statement in the first quarter, a small number of investigations opened against firms whose disclosures do not meet the three-part test, and a first public matter, most likely a settlement, in the first half of 2027. The food-delivery and grocery examples in the statement, the Maryland and New Jersey grocery bans, and the Connecticut food-delivery scope all point to the same first target category.
Wider context: from junk fees to personalized prices
The personalized pricing statement is not a standalone project. The FTC under Ferguson has run a continuous pricing-transparency campaign: the Fees Rule for live events and lodging took effect in May 2025, Instacart paid $60 million in December 2025 over deceptive tactics, Greystar paid $24 million over rent advertising, StubHub refunded $10 million in fees in April 2026, and an advance notice on food and grocery delivery fees went out the same month. The personalized pricing statement cites every one of those in its first footnote. The agency is not inventing a new theory; it is extending an existing one about the price a consumer sees being the price everyone sees.
That framing has a second-order effect on the delivery platforms. A food delivery app that already faces a fee-disclosure rulemaking now faces a personalized pricing disclosure standard whose first two examples describe its business. If the FTC’s April advance notice matures into a proposed rule on delivery fees, the two proceedings are likely to be read together, and the platforms will have to explain not only what fees they add but whether the base price itself varied by customer. That is a materially harder disclosure to write than a fee breakdown.
The technology layer is moving in the opposite direction. Walmart intends to replace paper shelf tags with electronic labels across its stores by the end of 2026, and an AFL-CIO Tech Institute report published September 9 argued that widespread electronic shelf label adoption could cost up to $6.9 billion in wages and 191,000 jobs while enabling in-store personalized pricing. New Jersey answered with its electronic shelf label moratorium, and the FTC statement’s last example, a retailer charging more online to a shopper detected inside its own store, is the bridge between the digital and physical versions of the same concern. Our explainer on electronic shelf labels in grocery covers the economics that make the labels attractive regardless of pricing strategy.
Internationally, the direction is similar but the instruments differ. The EU’s Digital Fairness Act proposal, expected around the turn of the year, is likely to address personalized pricing through the consumer law channel, and the Consumer Rights Directive already requires notice when a price is personalized on the basis of automated decision-making. The UK’s Digital Markets, Competition and Consumers Act gives the CMA direct fining powers for unfair commercial practices. The US approach, with its reliance on a 1914 statute and a 1984 policy statement, looks archaic by comparison, but it has the advantage of not needing new legislation.
Prior precedents: how FTC policy statements and state patchworks have played out
| Precedent | Instrument | Elapsed time to final or first action | Lesson for personalized pricing |
|---|---|---|---|
| Negative option enforcement policy statement (2021) | Policy statement, no comment period | Issued directly; enforcement cases followed within months | Statements move fast once the Commission votes |
| Biometric information policy statement (2023) | Policy statement, no comment period | Issued directly | Comment periods are optional and signal intent to build a record |
| Unfair or Deceptive Fees Rule (2022 to 2025) | Full Section 18 rulemaking | ANPR Nov 2022 to effective May 2025, roughly 30 months | A rule would take years; the statement is the fast path |
| Click-to-cancel rule (2023 to 2025) | Full rulemaking, vacated on procedure | NPRM Mar 2023 to final Oct 2024, vacated Jul 2025 | Procedural shortcuts in rulemaking get punished; statements avoid that exposure |
| Surveillance pricing 6(b) study (2024 to 2025) | Section 6(b) orders to eight firms | Orders Jul 2024; staff perspective Jan 2025; comment request withdrawn Jan 22, 2025 | Ferguson objected to conclusions before the record; expect the reverse this time |
| State privacy patchwork (2018 to 2026) | State statutes, California first | CCPA 2018 became the national design default within two years | Without California, no single state law sets the default; the federal floor fills the gap |
The last row is the one to watch. In privacy, California’s law became the engineering baseline because it was the largest market with the strictest rule. In personalized pricing, California has not enacted, Colorado vetoed, and the enacted bans are sector-limited. Absent a large-state ban, the FTC’s disclosure test is likely to become the design baseline by default, and the state labels in Connecticut and New York become add-ons to it rather than the other way around.
Implications for retailers, platforms, and investors
For national retailers, the near-term decision is whether to disclose or to abstain. Disclosure under the FTC test means telling a shopper that the price is personalized, on what basis, and from what data types, “clearly and conspicuously,” which in practice means at or near the price rather than in a privacy policy.
Abstention means being able to say, as Kroger and Lyft did, that the company does not personalize prices on personal data at all. Our reading is that most large chains will choose abstention for shelf prices and clearly-labelled loyalty discounts, because the reputational cost of a disclosure banner on a milk price is higher than the margin gain. That is consistent with what we predicted in June, and with the attorney advice reported by Bloomberg Law (be able to answer, for any two customers seeing different prices, why).
For marketplaces and delivery platforms, the harder problem is vendor contracts. The statement warns that businesses “that base personalized prices on personal data of consumers without sufficiently verifying that consumers consented to the collection of those data for that purpose may violate Section 5.” That reaches pricing intermediaries and data brokers, the same category of firm the 2024 6(b) orders went to. Platforms that buy pricing optimization as a service will need to know what inputs the vendor uses, and to be able to disclose them, before the first quarter of 2027. Our overview of what the FTC actually regulates in retail explains why Section 5 reaches the vendor chain.
For pricing software vendors, the disclosure standard is survivable in a way a ban is not. A ban on personalized pricing eliminates the product. A disclosure standard turns “what data did you use” into a product feature: audit logs, consent verification, and disclosure generation become the sales pitch. Expect the vendors that were named in the 6(b) orders to reposition toward “compliant personalization” in their 2027 marketing, and expect the ones that cannot document their inputs to lose enterprise accounts.
For investors, the sector effects are modest but real. Grocery and delivery margins were never meaningfully dependent on personalized pricing; the practice is mostly prospective, and the companies say so. The exposure is legal and reputational rather than earnings-driven: a Section 5 consent order carries twenty years of compliance reporting and civil penalty exposure for any later violation.
The larger financial question is whether electronic shelf label capex, which Walmart has committed to and Kroger is piloting, gets a slower payback once in-store personalization is politically closed. On current evidence, the labels are justified by labor savings alone, so the answer is probably no.
Caveats: what could go wrong
The obvious counter-signal is the argument made by The American Prospect on August 21 under the headline “FTC says it will enforce surveillance pricing. It won’t.” The case is that a two-member Commission with no Democratic commissioners, a deregulatory White House, and a chairman who shut down the 2025 comment request has produced a document that binds nobody and creates no rights, and that the statement’s own final paragraph says as much. That is true as a matter of law, since policy statements do not bind the FTC or the public. If the Commission finalizes and then brings no cases, the prediction is technically met but practically hollow, and the honest scorecard would have to say so.
A second risk is the opposite one: the statement is finalized with a weaker test. The comments from retail trade associations are likely to argue that “basis” and “data types” are too granular for a point-of-sale disclosure, and that a general privacy policy notice should suffice. If the final statement drops one of the three elements, or adds a safe harbor for loyalty programs broad enough to swallow the rule, the disclosure standard becomes the national floor in name but not in substance. We would count that as a partial miss.
Third, the state track may revive. New York’s One Fair Price Act is on the governor’s desk with what Arnold & Porter calls the broadest data definition yet, and California’s next session begins December 7 with the same sponsor and a bill that already passed both chambers. If New York signs and California passes a clean version by mid-2027, a large-state ban would coexist with the federal disclosure standard and would probably become the design default for national chains regardless of what the FTC says. That would restore the June thesis and demote this one.
Fourth, the Commission may simply not get to it. The FTC has an open rulemaking on delivery fees, an active Amazon case over ad auction surcharges, a rental fees rulemaking, and the routine load of consumer protection matters. A policy statement that has already served its deterrence purpose could sit on the docket. We put the probability of no final statement by March 31, 2027 at roughly one in four, mostly on capacity rather than intent.
| Scenario | Description | Rough probability | Checkable by |
|---|---|---|---|
| Base case | Final statement by Mar 31, 2027 with fact, basis, and data-type disclosure intact; first delivery or grocery matter by mid-2027 | 55% | Mar 31, 2027 and Jun 30, 2027 |
| Diluted final | Statement finalized but with a loyalty safe harbor or a privacy-policy notice sufficing | 15% | Text of the final statement |
| Slow finalization | Statement finalized after Q1 2027; enforcement begins later in 2027 | 15% | FTC docket and press releases |
| Statement shelved | Docket closes, no final statement in 2027; deterrence only | 10% | Absence of a Commission vote through 2027 |
| State ban revival | New York signs and California enacts a broad ban by mid-2027, overtaking the federal floor | 5% as a standalone outcome; overlaps with the base case | Governor action and the 2027 California session |
FAQ
What exactly is the FTC proposing on personalized pricing?
An enforcement policy statement, not a rule. It says that where consumers reasonably expect a price not to vary by their personal data, a business that personalizes the price must clearly and conspicuously disclose that it is personalized, the basis for the personalization, and the types of data used. Failing to do so is likely to be treated as deceptive or unfair under Section 5 of the FTC Act. The proposal was voted out 2-0 on August 19, 2026, and the comment window closes September 25, 2026.
Does the FTC statement ban personalized pricing?
No. The statement says explicitly that Congress has not given the Commission authority to prohibit personalized pricing in all circumstances. It also declines, in a footnote, to take a position on whether some personalized pricing would be unfair even when fully disclosed. The practice remains legal under federal law if disclosed; the state bans in Maryland, Connecticut, and New Jersey are separate and narrower in scope.
Is dynamic pricing the same thing?
Not under the FTC’s framing. The statement accepts that prices vary with supply and demand, region, taxes, and the nature of the product, and gives rideshare surge pricing and insurance as examples of legitimate variation. Personalized pricing, in its sense, is a price set from an individual’s personal data and inferred willingness to pay. Dynamic pricing that applies to everyone at the same place and time is outside the statement’s concern.
Why would a Republican FTC finalize a consumer protection statement on pricing?
Because it fits the agency’s stated cost-of-living agenda and avoids the tools the current majority dislikes. The statement cites Trump administration executive orders on pricing and fraud in its second footnote, builds on the junk fees cases the Ferguson Commission has already brought, and uses a disclosure theory rather than a prohibition. The House Oversight chairman’s September 9 letter endorsing “a final policy” removes the political risk of finishing.
Could the statement be challenged in court?
Not directly, because it creates no binding obligations and confers no rights. What can be challenged is any enforcement action that relies on it, and the statement’s citations to the 1984 policy statements and to circuit court deception cases are designed for that fight. The risk to the FTC is a court finding that a particular disclosure omission was not material, not that the statement itself is unlawful.
What should a retailer do before September 25?
Decide whether to file a comment, and in any case document, for every pricing system in use, whether two customers can see different prices and why. If the answer is inventory, geography, cost, or demand, the statement does not reach it. If the answer involves personal data or an inferred willingness to pay, the retailer needs either a compliant disclosure or a decision to stop. Vendor contracts for pricing optimization should be reviewed for what inputs the vendor uses and whether consumer consent for those inputs can be verified.
Doesn’t the death of California’s bill mean the pressure is off?
It means the pressure has shifted, not ended. California’s AB 2564 died on a procedural deadline after passing both chambers, and the next session opens December 7. Meanwhile Connecticut’s law takes effect October 1, New York’s disclosure law is in force, New Jersey’s grocery ban is enacted with enforcement from August 2027, and the federal statement is pending. A retailer that reads the California result as permission is likely to be surprised.
Which companies are most exposed?
On the FTC’s own examples, food delivery and grocery delivery platforms first, then rideshare, hotels, and general retailers. Congressional inquiries this year have named Amazon, Walmart, Target, Lyft, Uber, and Kroger among more than 30 companies. Several of those firms have stated publicly that they do not engage in surveillance pricing, which makes any later finding to the contrary a deception problem on top of a pricing one.
How will we know if this prediction was right?
Two checks. First, whether the Commission publishes a final personalized pricing policy statement on or before March 31, 2027, and whether it keeps the three disclosure elements. Second, whether the first public enforcement matter that cites the statement, by June 30, 2027, involves a food delivery or grocery platform. If the statement is finalized but diluted, or if a large-state ban overtakes it, we will record a partial miss.