The Conventional Wisdom
Many compliance teams view personalized pricing primarily as a privacy issue. The common belief is that if you're transparent about data collection in your privacy policy and obtain consent, you're covered. The assumption is that once you've disclosed what data you collect and why, your pricing algorithm can use that data freely.
While privacy compliance is important, this perspective misses the point highlighted by the FTC in its recent enforcement policy statement on personalized pricing.
A Broader Perspective
The FTC reframes personalized pricing as a consumer deception issue, not just a privacy compliance checkbox. Chairman Andrew Ferguson stated: "When consumers see a listed price, they expect it to be the same price that everyone else sees, not the retailer's estimate of how much they are willing to pay based on their personal data."
For your team, this means a customer who sees "$49.99" on your website assumes that's the price for everyone. They don't expect it to be a personalized estimate based on their browsing history, device type, or zip code. This assumption has legal implications.
The FTC Act prohibits unfair or deceptive practices. If you're showing different prices to different people based on their personal data without making that clear at the point of sale, you risk creating a false impression. A privacy policy buried three clicks away doesn't address this.
Consider how your team currently handles pricing disclosures. You likely review promotional terms, sale conditions, and subscription renewal language. But do you check whether your pricing display could mislead someone about how the price was set? Many teams don't, because they view this as a data governance issue rather than a consumer protection one.
The Evidence
The FTC's enforcement policy statement clarifies that undisclosed collection or use of personal data for personalized pricing could violate the Federal Trade Commission Act. The key word here is "undisclosed." The Commission isn't saying personalized pricing is illegal. It's saying that failing to inform consumers how their personal data is used to set a price creates legal risk.
Consumers expect prices to change based on supply and demand, not their web surfing habits or buying history. When retailers imply that a price is static when it actually varies by individual, they risk misleading customers.
Here's a practical test: Can a reasonable consumer looking at your pricing page understand that the price they see might differ from what someone else sees? If not, you have a disclosure problem.
The FTC also notes that informed consumers might take steps to avoid higher personalized prices, such as using a virtual private network or private browsing session, or avoiding retailers engaged in personalized pricing altogether. This observation shows that disclosure changes consumer behavior. If people knew prices were personalized, they'd act differently. Hiding that fact creates deception.
What to Do Instead
Start by mapping where personalized pricing decisions occur in your customer journey. Don't just look at your e-commerce checkout. Consider:
- Product listing pages where prices first appear
- Email campaigns with pricing offers
- Mobile app displays
- Retargeting ads with prices
- Customer service quotes
For each touchpoint, ask: Does the customer understand that this price might be based on their personal data? If you're using browsing history, location data, purchase patterns, or demographic information to adjust prices, make that clear.
Your disclosure should be at the point of decision, not buried in a privacy policy. Consider language like: "Prices may vary based on your location and browsing history" or "This price is personalized for you based on available data." The exact wording matters less than the clarity and proximity to the price itself.
Work with your legal team to review whether your current privacy disclosures cover personalized pricing. Many privacy policies discuss data collection broadly but don't specifically mention price-setting as a use case. If that's true for you, update the policy, but don't stop there. Point-of-sale disclosure is what protects you from a deception claim.
Train your marketing and e-commerce teams on this distinction. They need to understand that personalized pricing isn't just a technical capability or a privacy compliance question. It's a consumer trust issue with legal implications under the Federal Trade Commission Act.
The FTC is accepting public comments for 30 days once the enforcement policy statement publishes in the Federal Register. If your organization uses or is considering personalized pricing, submit a comment. The Commission wants to hear from businesses navigating this space.
When the Conventional Wisdom Is Right
Privacy compliance is essential. You can't use personal data for pricing if you haven't properly collected and secured it. Your privacy policy, consent mechanisms, and data governance controls are foundational.
The conventional view is also correct that personalized pricing isn't illegal per se. The FTC explicitly stated it doesn't have legal authority to ban the practice in all circumstances. Dynamic pricing based on supply, demand, inventory levels, or time of day doesn't raise the same concerns as pricing based on individual consumer data.
And yes, if you're fully transparent about personalized pricing, disclose it clearly, and give consumers meaningful choice, you're likely in a stronger position. The problem isn't the practice itself. It's the gap between what consumers think they're seeing and what's actually happening.
The key is recognizing that privacy compliance and consumer protection compliance are related but distinct requirements. You need both. A robust privacy program doesn't automatically solve a potential deception problem, and clear pricing disclosures don't excuse poor data governance.
Your compliance program should treat personalized pricing as a cross-functional risk that sits at the intersection of privacy, consumer protection, and marketing practices. That means your privacy team, legal counsel, and marketing leadership need to be in the same conversation, not operating in silos.
The FTC's enforcement policy statement is a signal. The Commission is watching this space and will enforce the Federal Trade Commission Act where businesses mislead consumers about how prices are set. Treat disclosure as the compliance control it is, not as an afterthought to your pricing strategy.
