FTC Surveillance Pricing Investigation: What AI Pricing Compliance Means for Your Business
Introduction: The FTC's New Focus on Personalized Pricing
Imagine buying a plane ticket and discovering the person next to you paid hundreds less for the same seat—not because they booked earlier, but because the airline used your browsing history, location, or loyalty status to set your price. This practice, known as surveillance pricing, is now under scrutiny by the Federal Trade Commission (FTC). In a significant move, the FTC has launched an investigation into nine major companies—Delta, United, JetBlue, Lyft, Uber, DoorDash, Instacart, Target, and Walmart—demanding information on whether they use consumers' personal data to set individualized prices.
While surveillance pricing is generally legal, the FTC's inquiry signals growing concern that AI-driven pricing may violate Section 5 of the FTC Act, which prohibits unfair or deceptive practices. For companies using dynamic or personalized pricing, this investigation underscores the need for robust AI pricing compliance programs. This article breaks down the investigation, the legal risks, and a practical compliance roadmap.
What Is Surveillance Pricing and Why Does the FTC Care?
Surveillance pricing refers to the practice of setting prices based on a consumer's personal data—such as location, browsing history, device type, or loyalty program membership. It's often powered by AI algorithms that analyze vast datasets to predict what each consumer is willing to pay. While this can optimize revenue, it raises fairness and transparency concerns.
The FTC is concerned that surveillance pricing may constitute an unfair or deceptive practice under Section 5. Unfairness occurs if the practice causes substantial consumer harm that is not reasonably avoidable and not outweighed by benefits. Deception occurs if companies mislead consumers about how prices are set. For example, if a company advertises "lowest prices" but uses personal data to charge some consumers more, that could be deceptive.
It's important to distinguish surveillance pricing from AI-powered dynamic pricing, which adjusts prices in real-time based on market demand, inventory, or time—without necessarily using individual consumer data. Airlines and ride-sharing companies commonly use dynamic pricing, and the FTC's investigation may conflate the two. Delta has defended its pricing as market-driven, while JetBlue denied using surveillance pricing after a controversial social media response.
The FTC Investigation: Scope and Authority
The FTC's investigation is being conducted under Section 6(b) of the FTC Act, which allows the agency to issue orders compelling companies to produce information for study purposes. These orders are not enforcement actions but can lead to further scrutiny or legislation.
The nine companies are required to provide detailed information, including:
- Data categories used: What consumer data (e.g., location, browsing history, loyalty data) is collected and how it's used in pricing decisions.
- Third-party relationships: Whether they share data with intermediaries or algorithm vendors, and the nature of those relationships.
- Internal testing and monitoring: Documentation of any testing, audits, or monitoring of pricing algorithms for fairness or discrimination.
- Disclosure practices: How they inform consumers about personalized pricing, if at all.
The orders demand documents and answers to interrogatories, and companies must comply within the specified timeframe. As the investigation is ongoing, organizations should verify the current status and any deadlines with the FTC.
Legal and Compliance Risks: Algorithmic Price Discrimination and More
Algorithmic Price Discrimination
Using AI to set prices can inadvertently lead to algorithmic price discrimination, where certain groups are charged more based on protected characteristics or proxies. This could violate anti-discrimination laws, such as the Equal Credit Opportunity Act (ECOA) if pricing relates to credit, or state consumer protection laws. The FTC's unfairness authority could also apply if the discrimination causes substantial harm.
Dark Patterns and Deception
If companies use dark patterns—design tricks that mislead consumers—to obscure personalized pricing, they risk deception claims under Section 5. For example, hiding fees or using confusing language about how prices are determined could be deceptive.
Disclosure Obligations and State Privacy Laws
Several state privacy laws impose obligations relevant to surveillance pricing. The California Privacy Rights Act (CPRA) gives consumers the right to opt out of automated decision-making, including profiling, and requires businesses to provide notice. The Colorado AI Act (effective February 1, 2026) requires impact assessments for high-risk AI systems, which could include pricing algorithms that make consequential decisions. Other states are also considering legislation. For instance, New Jersey and New York have seen proposed bills on surveillance pricing and algorithmic pricing disclosure, but these are not yet enacted law. Maryland and Connecticut have general consumer protection laws that could apply, but no specific pricing statutes have been confirmed. Companies should monitor state legislative developments closely.
EU Comparison
While this article focuses on the US, it's worth noting that the EU's General Data Protection Regulation (GDPR) Article 22 grants individuals the right not to be subject to automated decision-making, including profiling, that produces legal or similarly significant effects. The EU AI Act also imposes transparency obligations for AI systems, which could apply to pricing algorithms. Multinational companies should ensure their compliance programs address both US and EU requirements.
Compliance Roadmap for AI-Driven Pricing
To mitigate risks, companies using dynamic or personalized pricing should implement a structured compliance program:
- Data Mapping: Document all consumer data used in pricing, including sources, categories, and purposes. Identify any third-party data sharing.
- Algorithmic Impact Assessments: Conduct regular assessments to evaluate fairness, bias, and potential discriminatory outcomes. Document the methodology and results.
- Transparency and Disclosure: Clearly disclose how prices are personalized, ideally in plain language. Avoid deceptive claims and ensure consumers can understand the basis for pricing.
- Fairness Testing: Implement ongoing testing to detect disparate impact on protected groups. Use statistical methods to compare prices across demographics.
- Documentation: Maintain records of all compliance efforts, including assessments, testing, and disclosures. This is crucial for responding to FTC inquiries or state AG investigations.
Tools like AIGovHub's AI Governance Checker can help streamline these steps by providing a structured framework for algorithmic auditing and vendor assessment. For comprehensive AI risk management, consider platforms such as OneTrust, Holistic AI, and Credo AI, which offer AI governance and compliance solutions.
Broader US Regulatory Push on AI and Consumer Protection
The FTC's investigation is part of a wider regulatory focus on AI and consumer protection. The FTC has issued guidance on AI and algorithms, emphasizing that existing laws apply. For example, the FTC has taken enforcement actions against companies for deceptive AI claims and algorithmic discrimination. State attorneys general are also active; for instance, the Texas AG has pursued cases involving AI in consumer interactions. Additionally, the White House's Blueprint for an AI Bill of Rights outlines principles for automated systems, and the National Institute of Standards and Technology (NIST) AI Risk Management Framework provides voluntary guidance. Companies should monitor these developments and align their compliance efforts accordingly.
Key Takeaways
- The FTC's 6(b) investigation into surveillance pricing targets nine major companies and signals heightened scrutiny of AI-driven pricing.
- Surveillance pricing may violate Section 5 of the FTC Act if it is unfair or deceptive; algorithmic price discrimination and dark patterns are key risks.
- State privacy laws like CPRA and the Colorado AI Act impose disclosure and assessment obligations that intersect with pricing practices.
- A robust compliance program includes data mapping, algorithmic impact assessments, transparency, fairness testing, and documentation.
- Tools like AIGovHub's AI Governance Checker and vendors such as OneTrust, Holistic AI, and Credo AI can support compliance efforts.
Conclusion: Take Action Now
The FTC's investigation is a wake-up call for any company using AI to set prices. Proactive compliance not only reduces legal risk but also builds consumer trust. Start by assessing your pricing algorithms with AIGovHub's AI Governance Checker to identify gaps and implement necessary safeguards. For a deeper dive into AI governance frameworks, explore our EU AI Act Compliance Roadmap and our list of Best AI Governance Platforms.
This content is for informational purposes only and does not constitute legal advice.