On July 23, 2026, New Jersey Governor Mikie Sherrill signed the Fair Price Protection Act into law, making the Garden State one of the first in the nation to explicitly prohibit “surveillance pricing” on grocery items and household necessities. The practice involves retailers and delivery platforms using a shopper’s personal data—purchasing history, online search activity, location information, and other digital signals—to set individualized prices for identical products. In short, the person standing next to you in the checkout line, or ordering the same carton of eggs through a delivery app, may have been charged a different amount based on what an algorithm predicted each of you was willing or able to pay.
For privacy professionals, compliance officers, and businesses handling consumer data, this law is more than a consumer protection measure. It sits at the intersection of data privacy, algorithmic decision-making, and fair commercial practices. It also signals a growing legislative willingness to regulate how personal information can be used to influence the prices people pay for everyday essentials.
What Exactly Is Surveillance Pricing?
Surveillance pricing differs from traditional dynamic pricing. Classic dynamic pricing adjusts costs based on broad market factors such as supply, demand, time of day, or inventory levels—think airline tickets or hotel rooms. Surveillance pricing goes further. It personalizes the price to the individual consumer by analyzing data collected about that specific person.
Retailers and platforms can draw on loyalty program records, website browsing behavior, mobile app usage, geolocation data, device identifiers, and even inferred characteristics such as income level or household composition. Artificial intelligence and machine learning models then estimate the maximum price a particular shopper is likely to accept. The result is that two customers buying the same brand of milk at the same store at the same moment may see different prices, often without any disclosure that personal data influenced the outcome.
Critics argue this practice turns consumer data into a tool for extracting maximum revenue rather than competing on quality, service, or transparent pricing. Supporters of stronger regulation contend that when the products involved are food and basic household goods, the practice can disproportionately burden lower-income households and communities that already face higher costs of living.
New Jersey’s Fair Price Protection Act
The Fair Price Protection Act makes it unlawful for grocery retailers and third-party delivery services to use personal data to establish customized prices for groceries and other necessities. Covered data includes online activity, location information, purchasing history, biometric data, genetic information, and other collected personal information. The law treats violations as consumer fraud under New Jersey’s Consumer Fraud Act.
Penalties can reach $20,000 per violation, with additional civil enforcement available through the Attorney General’s office. Some reports indicate consumers may also have avenues to seek relief under the state’s consumer protection framework. Importantly, the statute carves out legitimate loyalty programs, promotions, and discounts that are offered on transparent, generally available terms. It does not prohibit ordinary demand-based pricing that is not tied to an individual’s personal data profile.
The legislation also imposes a one-year moratorium on the installation of new electronic shelf labels. These digital displays can change prices rapidly and have raised concerns that they could facilitate individualized or highly granular pricing strategies. Existing electronic labels may continue to be used, repaired, or replaced while the New Jersey Innovation Authority studies their broader effects on shoppers and workers.
The law takes effect several months after enactment, giving businesses time to review pricing systems, data practices, and vendor arrangements.
When Data Becomes a Pricing Weapon & Privacy Risk
From a privacy and data protection perspective, surveillance pricing raises several distinct issues. First, it often relies on secondary use of data originally collected for different purposes—loyalty rewards, order fulfillment, or marketing. Consumers who share information expecting discounts or convenience may not anticipate that the same data will later be used to charge them higher prices.
Second, the practice frequently involves inferences and algorithmic profiling. A model may conclude that a shopper who searches for “cheap dinner recipes” or lives in a certain ZIP code is more price-sensitive, or conversely that another shopper’s browsing patterns suggest higher willingness to pay. These inferences can be inaccurate, opaque, and difficult for individuals to challenge.
Third, surveillance pricing can intersect with sensitive or protected characteristics. Location data, purchasing patterns, and online behavior sometimes correlate with race, ethnicity, income, disability status, or family structure. Even if a retailer does not explicitly use protected-class data, proxy variables can produce disparate impacts. Privacy frameworks that focus solely on notice and consent may not adequately address these outcomes when the underlying decision-making is complex and automated.
The New Jersey law responds by drawing a bright line: personal data simply cannot be used to set individualized prices on covered grocery and necessity items. That approach prioritizes outcome over process. It does not require companies to obtain additional consent or provide more detailed notices for this specific use; it prohibits the use itself in this context.
A Growing State-Level Trend
New Jersey is not acting in isolation. Maryland became the first state to restrict surveillance pricing on certain food items earlier in 2026. Connecticut followed with a broader statute covering retail sellers and third-party delivery services. New York’s legislature has also advanced similar legislation. Other states continue to examine the issue through bills, hearings, and regulatory inquiries.
These measures reflect mounting concern about the combination of pervasive data collection, sophisticated AI pricing tools, and essential goods. Electronic shelf labels, real-time inventory systems, and delivery-platform algorithms have made highly personalized pricing technically feasible at scale. Lawmakers in multiple jurisdictions have concluded that market forces and existing unfair-trade-practice laws are insufficient to prevent potential abuse.
For multi-state retailers and national delivery platforms, the emerging patchwork creates compliance complexity. A pricing strategy that is lawful in one state may violate another’s statute. Companies will need to map data flows carefully, document the factors that actually drive price differences, and ensure that personal data is not used to generate individualized grocery prices in restricted jurisdictions.
Compliance Considerations for Businesses
Organizations that sell groceries or facilitate grocery delivery in New Jersey should take several practical steps. First, audit current pricing systems and any third-party tools that incorporate customer-level data. Identify whether personal information—loyalty history, app behavior, location, or device data—influences the final price shown to an individual shopper for covered products.
Second, review contracts with pricing technology vendors, data brokers, and analytics providers. Confirm that any data supplied or processed cannot be used in ways that would violate the Fair Price Protection Act. Update data processing agreements and internal use policies accordingly.
Third, distinguish clearly between permitted activities and prohibited ones. Transparent, broadly available loyalty discounts and promotional pricing remain lawful. Demand-based adjustments that do not rely on individual personal data profiles are generally outside the ban. The critical test is whether the price is customized to a specific consumer based on that consumer’s personal information.
Fourth, prepare for the electronic shelf label moratorium. Stores planning to install new digital pricing displays will need to pause those projects for the one-year study period. Existing installations can continue operating, but any expansion should be evaluated against the statutory restrictions.
Finally, train relevant teams—pricing, marketing, data science, and e-commerce—on the new boundaries. Document decision-making processes so that the business can demonstrate, if questioned, that personal data did not drive individualized grocery prices.
What Consumers Should Know
For shoppers, the most immediate benefit is greater confidence that the price displayed for a carton of milk or a package of chicken is not being quietly adjusted upward based on their digital footprint. The law does not eliminate all price differences; stores can still run sales, offer membership discounts, and respond to supply conditions. It simply removes the ability to personalize those prices using surveillance-style data analysis for covered items.
Consumers who participate in loyalty programs should continue to receive the discounts and rewards those programs advertise, provided the programs operate on transparent and generally available terms. Anyone who suspects a violation can contact the New Jersey Attorney General’s Division of Consumer Affairs.
NJ Privacy and AI Governance
The Fair Price Protection Act illustrates a larger regulatory pattern. Legislatures are increasingly willing to restrict specific high-stakes uses of personal data and AI systems rather than relying solely on general privacy principles such as purpose limitation or data minimization. When the outcome is perceived as unfair—especially for essential goods—policymakers may simply prohibit the practice.
This approach has implications beyond grocery pricing. Similar concerns arise in insurance underwriting, credit offers, housing, employment screening, and targeted advertising. Each domain involves algorithms that use personal data to allocate opportunities or costs. New Jersey’s law demonstrates that when those allocations involve basic necessities and lack transparency, lawmakers are prepared to intervene with categorical bans.
For privacy and compliance teams, the message is clear. Data governance programs must look beyond traditional notice-and-choice frameworks and examine the downstream effects of data use. Questions worth asking include: Could this data set or model be used to personalize prices or terms in a way that creates unfair outcomes? Are there sensitive or high-stakes contexts in which personalization should be limited or prohibited? Have we documented the legitimate business purposes for every secondary use of consumer information?
Companies that treat privacy as a compliance checkbox rather than a substantive constraint on data-driven decision-making will find themselves repeatedly surprised by new restrictions. Those that build ethical data use and fairness considerations into product design and pricing strategy will be better positioned as the regulatory landscape continues to evolve.
New Jersey’s Fair Price Protection Act Compliance
New Jersey’s Fair Price Protection Act is both a concrete consumer protection measure and a signal of things to come. Surveillance pricing on groceries has moved from academic discussion and investigative journalism into enforceable state law. Other jurisdictions are watching closely, and additional bills are likely.
Retailers, delivery platforms, and the technology vendors that support them will need to adapt. Privacy professionals should monitor how enforcement develops, how the electronic shelf label study progresses, and whether other states expand the concept to additional product categories or broader definitions of personal data.
At its core, the law rests on a simple premise: when you walk into a grocery store or open a delivery app, the price you see for essential items should not depend on how much the retailer has learned about your private life. In an era of pervasive data collection and powerful algorithms, that principle is no longer taken for granted. New Jersey has chosen to write it into statute. Businesses that handle consumer data would do well to treat the principle seriously, both in New Jersey and beyond.
For organizations seeking to strengthen their data governance, pricing compliance, and AI risk management practices, understanding laws like the Fair Price Protection Act is an essential step. The boundary between innovative personalization and unfair surveillance is becoming clearer—and more enforceable—with each new state action.