Personalized Pricing Is Now Regulated: What Shopify Merchants Need to Know
Unico Commerce, FounderPersonalized Pricing Is Now Regulated: What Shopify Merchants Need to Know
For years, "personalized pricing" was a hypothetical. Not anymore. Regulators have moved from studying it to proposing enforcement — and the adjacent practices most stores use every day (countdown timers, "was/now" pricing, drip pricing) are already being fined.
This is not legal advice — the rules are evolving and vary by market. Treat it as a map of what to look at.
What the FTC is doing
The FTC's interest started with what it calls "surveillance pricing" — using personal data (location, browsing, purchase history, even cart contents) to set individualized prices.
- 2024: The FTC issued 6(b) orders to eight companies, including data brokers and pricing vendors.
- January 2025: Interim staff findings reported that intermediaries served at least 250 clients and drew on location, demographics, browsing, and shopping history.
- August 2026: The FTC released a proposed enforcement policy on "personalized pricing" (now the preferred term), relying on two theories:
- Deception — implying a price is broadly available, or failing to disclose that it's personalized.
- Unfairness — a hidden higher price that consumers can't reasonably avoid.
The tricky part: the FTC did not bless fully-disclosed personalized pricing, leaving the unfairness theory open. In other words, a disclosure is not guaranteed to be a safe harbor.
The state layer
Four states have enacted personalized-pricing laws, and more are pending:
| State | Approach |
|---|---|
| New York | Disclosure: a notice that the price was set by an algorithm using personal data |
| Maryland | Prohibition for large food retailers + delivery |
| Connecticut | Disclosure + prohibition (hybrid) |
| New Jersey | Prohibition for groceries, with a private right of action |
New Jersey's private right is the one to watch — it opens the door to class actions, not just regulators.
The EU requires disclosure of personalized pricing under consumer rules, and the UK has been aggressively fining dark patterns.
The part that already bites merchants
You may never set a personalized price. But the discount/popup stack you run touches several regulated practices:
1. Fake urgency and countdown timers. A bedding retailer was fined A$15 million by Australia's consumer regulator for strikethrough prices on products never sold at the "was" price, plus a countdown timer that reset and "Ending Soon" claims while the sale continued. False urgency is treated as a substantive misrepresentation — not a UX quirk.
2. Drip pricing. The UK's CMA issued its first major fines under its new powers (millions of pounds) for mandatory fees revealed late in checkout. If your pricing shows one number and adds shipping/fees later, that's the target.
3. "Was/now" reference prices. The EU requires the "prior price" to be the lowest price in the 30 days before the reduction. Perpetual "sales" and inflated reference prices are squarely in scope.
4. Loyalty "member pricing" that behaves like personalized pricing. Loyalty carve-outs generally require the program to be uniform, opt-in, and clearly disclosed. Behavior-targeted member pricing can start to look like the personalized pricing that's restricted.
What "safe" personalization looks like
The good news: none of this kills personalization. It kills a specific kind — varying the underlying price by personal identity, without disclosure or justification.
Personalizing whether and what to offer, based on behavior, is a different thing:
- Deciding whether to show a discount at all — based on real-time behavior (hesitation, cart state) — isn't setting a personalized price. It's deciding not to run a promo for someone who doesn't need one.
- Showing an offer only at genuine hesitation doesn't train shoppers or mislead them.
- Real urgency only — that actually expires, on inventory that actually exists — stays on the right side of the line.
What to do now
- Audit every urgency claim. Does the timer actually expire? Is "X left" true? If not, fix it.
- Check your reference prices. Is the "was" price real and recent?
- Keep price history. Regulators increasingly require you to prove past prices — keep a timestamped ledger.
- Prefer behavior-based offers over identity-based pricing. Decide whether to offer; don't quietly raise the price for one shopper.
- Disclose clearly, if you ever personalize price. A buried link is already the subject of enforcement interest.
The takeaway
The regulatory direction is clear: personalized pricing by personal data is under scrutiny; personalized offers triggered by behavior are not.
That's a lucky alignment. The compliant path — decide whether to discount, and show offers only when someone actually hesitates — is also the profitable one. The strategy that keeps you out of trouble is the same one that protects your margin.
