Why US surveillance-pricing rules will come from states, not Washington, by year-end 2026: 3 regulatory tells

The fight over personalized algorithmic pricing in US retail is likely to be settled in state capitals rather than in Washington, and the decisive moves point to year-end 2026. The pattern across the last month suggests that a widening patchwork of state bans and disclosure laws, not a federal rule, will become the binding constraint that pushes national chains toward a single conservative, non-personalized pricing posture before the 2026 holiday season. A congressional inquiry opened in mid-May is best read as a scrutiny signal, not the start of federal rulemaking. The action that actually changes what a shopper sees at checkout is happening at the state level, and it is accelerating.

In short

  • The prediction: state law, not federal rulemaking, will set the operative rules on surveillance pricing, and the pressure is likely to force large national retailers toward a uniform, non-personalized pricing standard before the 2026 holiday season.
  • Timeframe: the direction should be clear by year-end 2026, with more states enacting bans or disclosure mandates than any binding federal action over the same window.
  • Signal 1: the House Energy and Commerce ranking member opened a surveillance-pricing inquiry on May 11, 2026, sending letters to 25 large retailers, an information request rather than a proposed rule.
  • Signal 2: in roughly the past month, Maryland signed a grocery surveillance-pricing ban while Colorado and Connecticut passed their own bans, and California’s AB 2564 cleared a key Assembly vote.
  • Signal 3: state attorneys general are already enforcing under existing law, with a California investigative sweep and New York’s algorithmic-pricing disclosure mandate live since November 2025.

Why this matters now

Surveillance pricing, sometimes called personalized or individualized pricing, describes the practice of using a shopper’s personal data to set a price tailored to that specific person. The inputs can include location, browsing history, device, purchase patterns, and inferred willingness to pay. It is distinct from ordinary dynamic pricing, where a price moves for everyone in response to demand, time, or inventory. The distinction matters because the emerging laws target the personalized variant, not the universal one.

Retailers have spent the last several years building the data infrastructure that makes personalized pricing technically feasible. The same first-party data assets that power loyalty programs and the booming in-store retail media networks scaling toward the holidays can, in principle, feed an individualized pricing engine. That capability is precisely what regulators have started to probe. The signals point to a window where the capability and the rules collide.

The timing is not accidental. Affordability is the dominant consumer-economic theme of 2026, and pricing that appears to charge different people different amounts for the same item is an easy political target. The pattern suggests legislators see surveillance pricing as a low-cost, high-salience issue heading into the fall.

There is also a technology trigger. The maturation of cheap machine-learning tooling and the spread of electronic shelf labels mean that personalized pricing has moved from a theoretical risk to a practical option that mid-size retailers, not just the largest platforms, can now deploy. Regulators tend to act once a capability looks like it is about to scale, and the signals suggest that inflection has arrived. That is a familiar shape: the rules tighten just as the technology becomes ordinary.

For shopappy readers, the practical question is not whether surveillance pricing is good or bad in the abstract, but where the operative line will be drawn and who will draw it. The answer emerging from the past month is that states are drawing it, quickly, and that the line is moving toward restriction. The rest of this analysis traces how that happened and what it likely means.

Signal 1: a federal inquiry that signals scrutiny, not rules

On May 11, 2026, the ranking member of the House Energy and Commerce Committee, Frank Pallone, launched a formal inquiry into corporate surveillance pricing. The committee sent letters to 25 large retailers, a roster that reportedly included Albertsons, Amazon, CVS, Stop and Shop, Target, Walgreens, Walmart, Wegmans, and Whole Foods, with responses requested by late May. The letters asked each company to detail what customer data it collects, whether and how that data informs prices, and whether shoppers can opt out.

The framing was pointed. “Consumers deserve to know if businesses are using their personal information to manipulate the prices they pay or experiment with algorithms to set the prices they see,” the inquiry stated. That language is the language of oversight, not of a notice of proposed rulemaking.

This is the crucial nuance. An inquiry letter from a committee minority is a request for information, not an exercise of regulatory authority. It can shape the narrative, generate hearings, and pressure companies, but it does not by itself create an enforceable obligation. The prior precedent of similar congressional information requests points to a long runway, often measured in quarters or years, before anything binding emerges, if it emerges at all.

Read against the federal backdrop, the inquiry reinforces rather than contradicts the thesis. The Federal Trade Commission has studied surveillance pricing, issued requests for comment, and published staff findings, but it has not promulgated a binding surveillance-pricing rule. The federal posture is investigatory. The pattern suggests it will stay that way through 2026, leaving the operative constraints to be written elsewhere.

Signal 2: a state legislative wave that crossed from bills to law in May

The more consequential development is that state legislation moved from proposal to enactment during the past month. Maryland became the first state to ban surveillance pricing in grocery, with Governor Wes Moore signing a measure aimed squarely at the use of personal data to set food prices. In the same window, lawmakers in Colorado and Connecticut passed their own surveillance-pricing bans. By the count circulating among practitioners, three states advanced bans to passage inside a single month.

California, the market that retailers cannot ignore, is moving in parallel. Assembly Bill 2564 cleared a key legislative vote in mid-May and would prohibit retailers from adjusting prices based on shopper characteristics such as age, gender, or location. The proposal carries civil penalties reported at up to 12,500 dollars per violation, with higher exposure for intentional conduct. The bill still needs full passage and the governor’s signature, expected to be resolved in the fall, so it is not law yet.

The breadth matters as much as the count. Bills have been introduced across a politically diverse set of states, including New Jersey, Pennsylvania, and Texas, which signals that this is not a single-party or single-region phenomenon. The pattern suggests a durable legislative trend rather than a one-off.

This is the heart of the prediction. When binding rules appear at the state level faster than at the federal level, national retailers face a familiar problem: complying with fifty potentially conflicting regimes is more expensive than adopting one conservative standard everywhere. That dynamic is what historically converts a state patchwork into a de facto national rule.

It is worth noting how fast the legislative posture shifted. A year ago, most of these measures were academic proposals or single-state bills with uncertain prospects. Within the recent window they crossed the line into signed law in at least one state and passed-but-not-signed status in others, which is the moment when corporate legal teams start treating a trend as a planning input rather than a watch item. The pattern suggests the issue has reached the stage where compliance roadmaps, not just lobbying, become the dominant corporate response.

Signal 3: state attorneys general are already enforcing under existing law

The third signal is that enforcement does not need to wait for new statutes. California’s attorney general opened an investigative sweep earlier in 2026 focused on surveillance pricing across the grocery, travel, and retail sectors, sending inquiry letters with short response deadlines and examining whether the practice exceeds what consumers would reasonably expect under the state’s privacy law. That is an enforcement theory built on existing consumer-protection and privacy authority, not a hypothetical future rule.

New York has gone further into operational territory. Its Algorithmic Pricing Disclosure Act has been in effect since November 2025 and requires a business that sets a price using an algorithm fed by personal data to display a notice reading, in substance, that the price was set by an algorithm using the shopper’s personal data. Violations carry penalties up to 1,000 dollars each, enforced by the attorney general after a cure period. New York’s attorney general has also backed a broader package that would move from disclosure toward outright restriction.

Labor has joined the pressure as well, with a major retail and grocery union publicly seeking a ban on surveillance pricing in grocery stores in mid-May. The combination of attorneys general acting under current law, a live disclosure mandate, and organized labor pushing for bans is a more immediate operational constraint than any pending federal inquiry. The pattern suggests retailers are already being asked to explain their pricing logic, today, in specific states.

Signals matrix

Signal Level Date observed Binding now? What it predicts
House Energy and Commerce inquiry, 25 retailers Federal May 11, 2026 No, information request Federal scrutiny rises, but rules lag
Maryland grocery ban signed; Colorado and Connecticut bans passed State law Past month (May 2026) Yes, where enacted State bans multiply faster than federal action
California AB 2564 clears key vote State law (pending) Mid-May 2026 Not yet The largest market may force a national standard
California AG investigative sweep State enforcement Active in 2026 Yes, under existing law Enforcement does not wait for new statutes
New York disclosure mandate State law Live since Nov 2025 Yes Operational compliance burden already exists

What the pattern suggests

Put the three signals together and a clear sequence emerges. Federal attention is rising but remains advisory, while state law is becoming operative and multiplying, and state enforcers are already acting under powers they hold today. The likely result is that the rules retailers actually have to follow on personalized pricing will be set by states first, with Washington following much later, if at all.

The next step in that sequence is the compliance decision inside large retailers. Maintaining a different pricing engine for each state, switching personalization on in some and off in others, is operationally fragile and legally risky. The cheaper and safer route, and the one the prior precedent favors, is to standardize on the most restrictive applicable rule and apply it nationally. That is how a handful of state bans can quietly retire personalized pricing across a national footprint.

There is a useful contrast with regulations that look fearsome but change little behavior. The EU’s de minimis fee is a recent example where the headline did not match the operational impact, as argued in our analysis of why the EU’s July de minimis fee will not slow Temu and Shein. Surveillance-pricing law cuts the other way: it targets a capability that is expensive to maintain across conflicting regimes, so the rational response is retreat to a common standard rather than circumvention. The pattern suggests behavior change, not just paperwork.

The holiday season sharpens the timing. The fourth quarter is when pricing decisions are most visible, most scrutinized, and most consequential for revenue, which raises both the reputational stakes of a personalized-pricing controversy and the incentive to settle the question before peak trading begins. A retailer that wants to avoid being the surveillance-pricing story of the 2026 holidays has a strong reason to lock in a conservative, defensible posture in the autumn. The pattern suggests the calendar itself is pulling the decision forward into the back half of 2026.

To be precise about falsifiability, the prediction can be checked on three measures by the end of 2026. First, whether more states enact bans or disclosure mandates than the number of binding federal surveillance-pricing rules adopted, which the signals suggest will be lopsided toward states. Second, whether the federal inquiry remains advisory rather than producing an enforceable rule. Third, whether at least one major national retailer signals a uniform, non-personalized pricing posture rather than maintaining state-by-state personalization.

Prior precedents: when a state patchwork becomes the national rule

The mechanism here is not new. US consumer and data regulation has repeatedly defaulted to the strictest state standard because national operators find uniformity cheaper than fragmentation. The table below sets out three precedents that the current situation rhymes with.

Precedent How it started How it became a de facto national standard
California Consumer Privacy Act One large state passed a privacy law ahead of any federal statute National firms extended California-grade privacy controls to all users rather than segmenting
State data-breach notification laws States enacted notification rules one by one with no federal law Companies built to the strictest timelines and applied them across all states
California Proposition 65 warnings A single state mandated specific consumer warnings Manufacturers added the warnings to products sold nationwide to avoid split inventory

In each case a federal rule was absent or slow, a large or first-moving state set the bar, and the cost of maintaining separate practices pushed national firms to converge upward. The surveillance-pricing wave is following the same template, with California again positioned as the standard-setter if AB 2564 becomes law. The pattern suggests the operative national constraint will be written by whichever state goes furthest.

Wider context: the affordability politics driving the fight

This regulatory wave is riding a macro current. Inflation reading near 3.8 percent has been outpacing wage growth, and surveys cited in the recent coverage show a record share of Americans reporting a worsening financial situation. In that environment, the idea that an algorithm might charge a struggling shopper more because it senses they will pay is politically toxic. The pattern suggests legislators will keep finding it attractive through the fall midterm cycle.

The fight also fits a broader pivot toward regulating the consumer interface rather than just the back office. Europe is moving in the same direction, as we discuss in our look at how the EU Digital Fairness Act will target retail UX, which similarly scrutinizes personalization and manipulative design at the point of sale. The transatlantic alignment increases the odds that data-driven pricing faces durable constraints rather than a passing scare.

There is a deeper tension under all of this. The retail industry has spent years arguing that richer data improves the customer experience, and the same data now sits at the center of a fairness complaint. The economics of data-driven retail, visible in everything from loyalty programs to the way agentic checkout is settling on the card networks, depend on personalization that regulators are starting to fence in. The pattern suggests the fence will be drawn around price specifically, while leaving most other personalization intact.

Implications for retailers, platforms, and investors

For large national retailers, the prudent planning assumption is convergence on a conservative pricing standard before the holiday season. That means auditing whether any pricing input keys off individual-level personal data, documenting the logic, and being ready to demonstrate that displayed prices are not personalized. The reputational downside of being named in a state enforcement action during the holiday window is larger than the marginal revenue from individualized pricing.

For grocers and supermarkets specifically, the exposure is highest, because the earliest enacted bans and the loudest labor pressure target food retail. Electronic shelf labels, which enable rapid price changes, are drawing scrutiny as a potential vector for personalization even where they are used only for uniform dynamic pricing. The pattern suggests grocers should separate, clearly, the universal dynamic pricing they may keep from the individualized pricing they will likely have to drop.

For platforms and the broader data-monetization complex, the read-through is narrower than it might first appear. Retail media and loyalty economics, including the data-driven profit engine we examined in why Walmart’s profit growth will lean on ads and membership, do not depend on charging different shoppers different prices for the same SKU. Those models monetize attention and targeting, not price discrimination at the till. The likely outcome is that the ad and loyalty layer survives intact while the personalized-price layer is curtailed.

For investors, the signal is to discount any thesis that assumes durable margin uplift from individualized pricing in the US. The capability is now a regulatory liability with a rising compliance cost and limited defensibility. The pattern suggests modeling personalized pricing as an option that is being written down, not an annuity.

There is a second-order implication for the vendors that sell pricing-optimization software. Demand for tools that personalize prices at the individual level is likely to soften in the US even as demand for compliant, transparent, uniform dynamic-pricing tools holds up. The likely winners are vendors that can prove their engines do not key off protected personal characteristics and can produce an audit trail on demand. The pattern suggests a quiet repositioning across the pricing-technology stack toward defensibility rather than maximal personalization.

None of this requires a dramatic enforcement spectacle to take effect. The mere prospect of being the test case in a state attorney general action, during a politically charged affordability moment, is usually enough to move risk-averse national retailers ahead of the holiday season. Corporate behavior tends to change in anticipation of enforcement, not only in response to it. The pattern suggests the practical retreat from personalized pricing may run ahead of any headline penalty.

Scenarios into 2027

Scenario Rough likelihood What it looks like by year-end 2026
State patchwork hardens (base case) Most likely More states enact bans or disclosure rules; large retailers standardize on a conservative national posture; federal action stays advisory
Federal preemption intervenes Plausible but secondary A federal moratorium or preemptive statute freezes state action, slowing the patchwork and preserving personalization
Industry litigation stalls bans Possible Court challenges delay enforcement of new state laws, extending uncertainty without resolving the direction
Disclosure becomes the compromise Possible States favor New York-style disclosure over outright bans, letting personalization continue with a label

Caveats: what could go wrong

The prediction is grounded but not guaranteed, and several counter-signals deserve weight. The most important is federal preemption. There has been live political appetite for a federal moratorium on state regulation of algorithms and artificial intelligence, and if such a measure were enacted it could freeze or override the state surveillance-pricing wave. That single move would undercut the core mechanism of this forecast, so it is the scenario to watch most closely.

A second caveat is industry’s legal and definitional pushback. Some industry voices argue that existing antitrust and consumer-protection law already covers genuinely harmful pricing, making new bans redundant, and litigation on First Amendment or commerce-clause grounds could delay enforcement. There is also a real definitional problem: distinguishing prohibited personalized pricing from permitted dynamic pricing is hard, and narrowly drafted or grocery-only statutes, like Maryland’s, may leave large categories untouched.

A third caveat is that disclosure, not prohibition, could become the dominant settlement. If most states follow New York toward labeling rather than banning, retailers might keep personalized pricing behind a notice rather than abandoning it. In that branch the capability survives, and the prediction of a retreat to non-personalized pricing would be only partly right.

Finally, the California signal is still contingent. AB 2564 has cleared a vote but not become law, and a veto or amendment would soften the single most important state catalyst. A careful reading holds the base case as most likely while acknowledging that preemption or a disclosure compromise are the live alternatives.

Frequently asked questions

What exactly is surveillance pricing?

It is the use of a shopper’s personal data, such as location, browsing history, or inferred willingness to pay, to set a price tailored to that individual. It differs from ordinary dynamic pricing, where a price moves for everyone in response to demand, time, or stock levels.

What is the core prediction here?

That state law, not federal rulemaking, will set the operative rules on surveillance pricing, and that the patchwork will likely push large national retailers toward a uniform, non-personalized pricing standard before the 2026 holiday season. The direction should be visible by year-end 2026.

Does the May 2026 congressional inquiry mean a federal ban is coming?

Not necessarily, and probably not soon. The inquiry is an information request from a committee minority, which signals scrutiny rather than imminent rules. The prior precedent points to a long runway before any binding federal measure, if one arrives at all.

Which states have actually acted?

Maryland signed a grocery surveillance-pricing ban, and Colorado and Connecticut passed bans in the same recent window. New York’s algorithmic-pricing disclosure law has been live since November 2025, and California’s AB 2564 has cleared a key vote but is not yet law.

Could the federal government stop the state wave?

Yes, and that is the main counter-signal. A federal moratorium or preemptive statute covering state regulation of algorithms could freeze the patchwork. If that happens, the central mechanism of this forecast weakens considerably.

Will retailers have to abandon all dynamic pricing?

Unlikely. The laws in view target personalized pricing based on individual data, not universal price changes tied to demand or inventory. The expected outcome is that uniform dynamic pricing continues while individualized pricing is curtailed.

How does this affect retail media and loyalty programs?

Less than the headlines imply. Retail media and loyalty economics monetize targeting and attention, not charging different shoppers different prices for the same item. Those models can largely continue even if personalized pricing is restricted.

How will we know if this prediction was right?

By three checks at year-end 2026: whether more states enact bans or disclosure rules than binding federal actions, whether the federal inquiry stays advisory, and whether at least one major national retailer signals a uniform non-personalized pricing posture. A no on all three would falsify it.

What should retailers do now?

Audit whether any pricing input keys off individual personal data, document pricing logic, and prepare to demonstrate that displayed prices are not personalized. Grocers in particular should separate the universal dynamic pricing they may keep from the individualized pricing they will likely have to drop.