|
Getting your Trinity Audio player ready...
|
The Federal Trade Commission is warning companies that using personal data to set individual prices can create consumer protection risks when customers do not know it is happening.
In a proposed enforcement policy statement issued Aug. 19, the FTC said it intends to pursue deceptive or unfair personalized pricing practices under Section 5 of the FTC Act and other laws it enforces.
The agency is not proposing a blanket ban on personalized pricing. Its focus is whether consumers understand when personal information affects the price they see.
For in-house legal teams, that distinction is important. The main compliance question is no longer limited to whether a business can vary prices. Counsel may also need to know what data affects a price, how a pricing system uses that information and whether customers receive an accurate explanation of the process.
The proposal could bring pricing systems further within the legal function’s remit. Decisions once handled mainly by marketing, commercial and technology teams may now require closer consumer protection, privacy and data governance oversight.
The legal risk grows when customers cannot see why prices differ
Personalized pricing differs from ordinary dynamic pricing.
A retailer might change prices for all customers because demand rises, inventory falls or a promotion ends. Personalized pricing goes further by using information about an individual customer to determine the price that person sees or pays.
The FTC’s concern centers on markets where consumers have traditionally expected people shopping for the same product at the same place and time to see the same price.
Modern data systems can allow companies to estimate how much a customer may be willing to pay or whether that person is likely to compare prices elsewhere. That can create a deception risk if the customer believes a displayed price is generally available while the business has changed it based on personal information.
Under the proposal, businesses using personalized pricing in circumstances where consumers reasonably expect common prices should clearly disclose that the price is personalized, the basis for the personalization and the types of data used.
For legal teams, the reference to the basis for personalization deserves attention. A broad privacy statement saying customer information may be used to improve services may not explain why one shopper received a different price.
Risk can also extend beyond increases in the headline price. Personalized coupons, discounts and loyalty offers may require similar review if customer data determines the amount a person ultimately pays.
The compliance issue therefore extends beyond the pricing page. It can include customer-facing statements that create an inaccurate impression of how a price or discount was determined.
Legal teams need visibility into the data behind the price
The FTC’s earlier work on what it calls surveillance pricing shows why reviewing the final price may not be enough.
Its study found that pricing intermediaries can use detailed customer information, including location, demographics, browsing activity and shopping history. The agency also identified behavioral signals such as mouse movements and items left in online carts. The intermediaries examined served at least 250 clients.
For an in-house legal department, this creates a data lineage issue.
A company may collect information for website analytics, advertising, customer segmentation or loyalty programs. A technology or commercial team may later use the same information in a pricing model. The legal risk can change even when the underlying data collection does not.
Counsel therefore needs enough visibility to trace the path from customer data to pricing outcome.
That review may include the data sources used, whether information comes from third parties, which attributes a model infers, how customers are segmented and what range of price differences the system can produce.
Vendor oversight is another concern. Many companies do not develop pricing tools internally. They buy software or services from specialist providers.
Using an outside provider does not remove the need to understand what affects the customer’s price. Contracts, technical documentation and vendor reviews may need to give legal teams enough information to assess whether company disclosures remain accurate.
The FTC’s 2024 inquiry into the sector shows the breadth of this issue. It sought information from eight companies about the data used in pricing products, where that information came from and how the systems operated.
For counsel, that is a reminder that legal oversight cannot stop at the vendor contract. A business also needs to understand how the technology is used in practice.
Pricing governance now needs legal, marketing and technology at the same table
The proposal also exposes an organizational weakness in many data-driven pricing programs.
Marketing may control customer segments, promotions and loyalty programs. Data teams may build or manage the model. Commercial leaders may set margin targets. Technology teams may connect pricing systems to customer data.
Legal can end up reviewing terms and disclosures only after those decisions have been made.
That approach becomes harder to sustain when the accuracy of a disclosure depends on understanding how the system operates.
A stronger governance model would involve legal before deployment. Counsel should be able to answer four basic questions: What customer information affects the price? Why is that information used? How much can it change the offer? What does the customer know about the process?
Those questions should remain answerable after launch.
Pricing systems can change as models are retrained, new data sources are added or vendors update their software. A disclosure approved months earlier may no longer describe the system accurately. Legal approval should therefore be linked to change management rather than treated as a one-time review.
This is also where the proposal overlaps with broader data governance.
A privacy review may ask whether a company can collect and process customer information. A personalized pricing review adds another question: What happens when that information affects what the customer pays?
The FTC has not proposed a general prohibition on personalized pricing, and its enforcement statement remains open for public comment through Sept. 18, 2026.
Even so, the direction of travel is clear enough for in-house teams to review their controls now. Price-setting systems that use personal data should not be treated only as commercial technology. They also raise questions about consumer expectations, disclosure accuracy and accountability for data use.
For legal departments, the practical task is to build oversight around the full process rather than the final price. The more customer data influences what an individual pays, the more important it becomes for counsel to understand how that decision was made and whether the customer received enough information to assess the offer.
Source
