New Jersey has enacted the Fair Price Protection Act, a consumer-protection law that bars retailers from using personal data to charge different shoppers different prices for identical goods. Governor Mikie Sherrill signed the measure on July 23, 2026, positioning the state among the early movers in a growing fight over AI-enabled “surveillance pricing.”
The law targets systems that use data such as online activity, location, purchasing history, or other collected information to predict what an individual shopper may be willing or able to pay. It does not ban ordinary discounts or loyalty programs, and it does not ban every form of dynamic pricing. That distinction is critical for small retailers and e-commerce operators using off-the-shelf pricing tools. The legal risk turns on whether the system adjusts prices based on personal data at the individual shopper level.
The law also places a one-year moratorium on the new use of electronic shelf labels while New Jersey studies the technology’s impact. Existing electronic shelf labels do not have to be removed, repaired labels may remain in use, and the state’s concern is not the label technology alone. The broader issue is whether digital pricing infrastructure could enable hidden, individualized price changes.
New Jersey’s law targets individualized prices based on personal data
The Fair Price Protection Act prohibits retailers from using personal information to charge different prices for identical products based on algorithmic predictions about a shopper’s willingness or ability to pay. Governor Sherrill framed the law as both a privacy measure and an affordability measure, arguing that families should not be charged more for the same product because a company has gathered data about them.
The law draws a line between prohibited surveillance pricing and pricing practices that remain permissible. Retailers can still offer loyalty discounts, coupons, promotions, or other bona fide discounts. They can also make ordinary price changes based on inventory, supply costs, seasonality, or market conditions. What they cannot do is use personal data to individualize prices for shoppers buying the same goods.
That line may be harder to apply in practice than it looks on paper. Many pricing systems combine demand signals, inventory data, browsing behavior, purchase history, and customer segmentation. A small business using a third-party pricing engine may not know which inputs are influencing final prices unless the vendor provides clear documentation.
The surveillance pricing debate accelerated after a Consumer Reports and Groundwork Collaborative investigation found that some grocery shoppers using Instacart saw different prices for the same items from the same stores at the same time, with some item-level differences reaching 23%. Instacart later said it would end the price-testing program, while denying that the practice amounted to surveillance pricing.
The New Jersey law is not limited to one company. It applies to businesses that use personal data to set individualized prices for grocery items and other necessities in New Jersey. Third-party shopping and delivery platforms may be covered, but so may smaller retailers if they use vendor tools that personalize prices without making the underlying logic clear to the business.
According to reporting by Inc., at least 20 other states are weighing similar measures. That means the compliance issue is likely to expand beyond New Jersey. The fragmented state AI regulatory landscape already creates different obligations for hiring, disclosure, and automated decision-making. Surveillance pricing laws now add a retail-pricing layer to that patchwork.
Small retailers may not realize their pricing tools create exposure
The highest-risk businesses are not necessarily the largest grocery chains. Small and mid-size retailers may use e-commerce suites, marketplace repricing tools, delivery integrations, or loyalty platforms that adjust prices or offers using customer data. Those tools are usually marketed as revenue optimization products, not as regulated AI pricing systems.
A small business may therefore be exposed without making an explicit decision to engage in surveillance pricing. If a vendor tool uses a shopper’s location, browsing history, cart contents, prior purchases, or demographic inferences to vary the price of the same item, the business may need to prove that the system is either outside the law’s scope or configured in a compliant way. Licensing the tool does not automatically transfer legal responsibility to the vendor.
Pricing transparency is also a customer-trust issue. Consumer trust in pricing transparency already matters for small retailers competing against larger platforms. A business accused of hidden individualized pricing may face reputational harm even before regulators or plaintiffs establish a violation.
Enforcement details will determine how urgent compliance becomes
New Jersey’s announcement makes clear that the state attorney general expects to enforce the law. The office described the measure as a way to ensure grocery prices remain fair, transparent, consistent, and not driven by the exploitation of consumer data. The practical compliance timeline will depend on the law’s effective date, implementing guidance, and any rules or enforcement priorities issued after signing.
One key unresolved issue for operators is whether the law creates or supports private lawsuits in addition to state enforcement. Private litigation can make compliance urgent even when agency resources are limited, as businesses have seen in other areas of privacy and consumer-protection law. Until that question is clear from the enacted text and implementing guidance, businesses should assume that the risk is real and not wait for the first enforcement action.
Other questions also need clarification: which data inputs trigger the prohibition, how vendors should document pricing logic, whether personalized discounts are treated differently from personalized price increases, and how bundled SaaS systems should demonstrate compliance. The broader debate over AI-driven business decisions has repeatedly produced laws that are clearer about what they prohibit than about how small businesses should prove compliance.
Small businesses should audit pricing tools before state laws spread
- Inventory every tool that touches pricing. List e-commerce platforms, marketplace repricing systems, delivery integrations, loyalty programs, point-of-sale systems, and vendor APIs that can change product prices or offers.
- Ask vendors what data drives price changes. Request written confirmation on whether the tool uses browsing history, location, purchase history, cart contents, demographic signals, or other personal data to vary prices at the individual shopper level.
- Separate demand-based pricing from personalized pricing. Document whether price changes are tied to inventory, time, cost, or market demand rather than personal data about a specific shopper. This distinction may be central to compliance.
- Check customer geography, not just business location. A business outside New Jersey may still need to assess the law if it sells into the state or uses a platform that serves New Jersey shoppers.
- Review contracts for liability allocation. Vendor agreements should say who is responsible if a pricing tool violates state consumer-protection law, who provides data-use disclosures, and who must cooperate with regulatory inquiries.
- Review loyalty programs carefully. The New Jersey announcement says the law does not ban loyalty programs or discounts, but businesses should document that any loyalty pricing is tied to a bona fide program rather than hidden predictions about willingness to pay.
- Monitor legislation in other states. Maryland, Connecticut, New York, California, and other large markets are important to track because definitions and enforcement mechanisms may differ from New Jersey’s approach.
Surveillance pricing rules are becoming part of the AI compliance map
The next important developments will be agency guidance, enforcement activity, and court cases interpreting the first wave of surveillance pricing laws. Those signals will show whether regulators treat personalized pricing as a straightforward consumer-protection violation or as a more technical question that requires evidence about how algorithmic systems operate.
Federal action remains possible but uncertain. A national standard could simplify compliance for multistate retailers, but it could also preempt stronger state protections. Until Congress acts, retailers and e-commerce operators will need to track state law one jurisdiction at a time.
For small businesses, the immediate lesson is practical: understand the pricing tools already in use before regulators ask. The businesses most exposed are not necessarily those intentionally using AI to charge more. They may be the ones that bought a pricing or personalization feature without realizing what data it used.
