Maryland’s surveillance pricing ban signals new era for AI-driven grocery pricing
Artificial intelligence is rapidly reshaping how retailers price goods.
Grocery chains and delivery platforms now use AI-driven systems to forecast demand, optimize promotions, manage markdowns, and react to competitive conditions in real time.
As these technologies become more sophisticated, however, regulators are beginning to draw an important distinction between traditional dynamic pricing and what critics call “surveillance pricing.” Maryland may have become the first state to formally regulate that line.
In April 2026, Maryland enacted the Protection From Predatory Pricing Act, becoming the first state to prohibit grocery retailers and delivery providers from using personal consumer data to set individualized food prices. The law takes effect Oct. 1 and applies to large grocery retailers and third-party delivery services operating in the state.
The legislation is significant not because it bans all dynamic pricing, but because it targets a narrower and more controversial practice: using AI and consumer profiling to determine how much a particular shopper may be willing to pay.
Dynamic Pricing Versus Surveillance Pricing
The debate surrounding AI pricing often becomes confusing because several different pricing models are grouped together under the same label.
Traditional dynamic pricing is already common across many industries. Airlines, hotels, ride-share companies, and retailers routinely adjust prices based on broad market conditions such as supply, demand, inventory levels, weather events, or competitor pricing.
Uber’s surge pricing is perhaps the best-known example. When demand spikes after a concert or during bad weather, fares increase for everyone in a given area. The pricing change is tied to market conditions rather than to the identity of a particular rider.
Maryland’s law is aimed at something different. The concern is not whether prices fluctuate, but whether AI systems use personal consumer data to charge different prices to different shoppers for the same grocery item.
Regulators are increasingly focused on situations where algorithms predict that one consumer is more likely to absorb a higher price than another based on loyalty participation, purchasing history, browsing behavior, location information, or other behavioral data.
In other words, lawmakers are scrutinizing when pricing technology moves from asking, “What is demand in this market?” to asking, “How much can this specific customer be induced to pay?” That distinction is becoming central to the evolving regulatory landscape.
Why the Issue Will Likely Emerge Online First
The practical impact of these laws will likely be felt most heavily in e-commerce, mobile applications, and delivery platforms rather than in traditional stores.
In physical grocery stores, shelf prices are generally visible to all consumers at the point of purchase. While retailers may use AI to manage promotions, optimize markdown timing, or forecast demand, shoppers standing in the same aisle typically see the same posted price.
Digital commerce operates differently. Online ordering systems, mobile apps, and delivery platforms can dynamically present individualized prices, discounts, fees, and offers in real time based on consumer-specific data and behavioral analytics.
As retailers continue expanding omnichannel commerce ecosystems, AI-powered pricing tools are increasingly integrated with loyalty programs, digital marketing platforms, customer-data systems, and third-party delivery services. These environments create greater opportunity — and greater regulatory risk — for pricing practices that lawmakers may characterize as surveillance pricing.
For grocery retailers, future compliance efforts will likely focus heavily on e-commerce architecture, loyalty integrations, customer-data platforms, and third-party delivery relationships where individualized pricing mechanisms are technologically easier to deploy and more difficult for consumers to detect.
Why AI-Driven Pricing Creates New Risks
Retailers are adopting AI-powered pricing tools because they can improve margins, reduce waste, optimize promotions, and respond more efficiently to changing market conditions. Many of these applications present relatively low legal risk. The legal and reputational concerns arise when algorithms rely heavily on individualized consumer profiling.
AI pricing systems often ingest enormous volumes of data and identify correlations that even retailers themselves may not fully understand. Depending on system design, these tools can unintentionally produce discriminatory or disparate outcomes affecting lower-income consumers or protected groups.
The opacity of many AI models compounds the problem. Retailers may not always be able to explain precisely why a system generated a particular price recommendation for a particular consumer. That lack of transparency is attracting increasing attention from lawmakers, privacy regulators, and consumer advocates.
The Growing Compliance Challenge for Multi-state Operators
Maryland’s law may be the first of its kind, but it is unlikely to remain alone for long. Several states, including California, Colorado, Illinois, Massachusetts, New York, and New Jersey, are considering legislation related to algorithmic pricing, AI transparency, or surveillance-based pricing practices. Some proposals focus on disclosure obligations, while others target discrimination risks or prohibit certain uses of personal data altogether.
For multi-state grocery operators, the challenge is that states are not using a consistent vocabulary. Terms such as “dynamic pricing,” “algorithmic pricing,” “personalized pricing,” and “surveillance pricing” are often used interchangeably even though they may regulate different conduct. As a result, a pricing system that complies in one jurisdiction could create legal exposure in another.
Privacy and Consumer Protection Risks
AI-driven pricing systems also intersect with a growing body of state privacy laws governing automated decision-making, profiling, and the use of personal information.
When pricing algorithms rely on consumer data to influence individualized pricing outcomes, retailers may trigger obligations involving transparency, consumer choice, consent requirements, and restrictions on certain forms of profiling. California, Colorado, and other states have adopted privacy frameworks that increasingly scrutinize how businesses use personal information in automated decision-making systems.
The reputational risks may be equally significant. Consumers generally tolerate surge pricing in discretionary contexts such as ride-sharing or travel. Grocery pricing, however, involves essential household goods. Public reaction may be far more negative if shoppers believe retailers are using personal data to determine who can be charged more for food. That perception is helping drive the momentum behind state legislation.
Practical Steps Retailers Should Consider Now
Retailers implementing AI-powered pricing technologies should begin strengthening governance controls now rather than waiting for additional regulation.
Several practical measures can help reduce both legal and reputational exposure:
- Conduct AI pricing audits to identify exactly what data inputs pricing systems use and whether personal or behavioral data influences pricing outcomes.
- Separate market-based pricing practices from individualized pricing models that rely on consumer profiling.
- Review vendor contracts carefully and require transparency regarding model functionality, explainability, testing, and compliance safeguards.
- Test pricing outcomes for potential disparate impacts affecting protected or vulnerable populations.
- Establish cross-functional AI governance involving legal, compliance, privacy, merchandising, technology, and data-science teams.
Maryland’s new law signals a broader shift in regulatory thinking. Legislators are no longer focused solely on how retailers collect consumer data — they are increasingly focused on how AI systems use that data to influence economic outcomes.
For grocery retailers and multi-state operators, the message is becoming clearer: AI-powered pricing technologies can deliver substantial operational efficiencies and competitive advantages, but without careful governance, they may also create the next major frontier of privacy, consumer-protection, and AI-compliance risk.
Sandy Grimm, partner in Burr & Forman's Corporate & Tax practice group and former chief legal officer and secretary at Southeastern Grocers, focuses his practice on corporate mergers and acquisitions, regulatory and licensing matters, antitrust recovery compliance and commercial disputes.
Elizabeth (Beth) Shirley, CIPP/US, CIPM, AIGP, partner in Burr & Forman's Cybersecurity & Data Privacy practice, is focused on AI, cybersecurity and data privacy, as well as business litigation.


