Regulation explainerRetail

Dynamic and personalized pricing: the rules retailers face

Changing prices often is broadly lawful. What the law restricts is how changes are announced, whether a price is tailored to one shopper, what personal data feeds it and whether competitors share the tool that sets it. The EU has discount and disclosure rules, the UK a directly enforced unfair-practices regime, and New York a mandatory notice on prices set with personal data. This page maps those rules to engine design.

Reviewed 10 October 2026 8 min read

On this page

How to use this rule map
Four pricing practices that the law treats differently
The instruments that constrain retail pricing algorithms
Four pricing practices across EU, UK and New York rules
When a shared repricing tool becomes a competition problem
Guardrails to design into the pricing engine
A grocery app that personalizes coupons, not shelf prices
Price experiments and the legal review they need
Questions and answers
Sources

How to use this rule map

Four pricing practices that the law treats differently

Vendors use these labels loosely. Regulators do not, so fix the vocabulary before the legal review starts.

Dynamic pricing: Prices move with conditions such as demand, stock, time of day or competitor prices, but every shopper sees the same price at the same moment. Electronic shelf labels and marketplace repricers usually work this way.
Personalized pricing: The price or offer differs between shoppers because of something known about them: purchase history, location, device, loyalty tier or a predicted willingness to pay. This is where most disclosure and data-protection duties attach.
Surveillance pricing: A term used by US regulators for personalized pricing built on broad collection of personal data, often supplied by third-party intermediaries rather than drawn from a retailer's own customer relationship.
Algorithmic pricing: Any price set or recommended by software, whether dynamic, personalized or both. The label says nothing about legality, but it matters for competition law when several sellers rely on the same algorithm.

The instruments that constrain retail pricing algorithms

Directive (EU) 2019/2161 (the Omnibus Directive), amending the Price Indication and Consumer Rights Directives[^1]

Applies whenA trader announces a price reduction to consumers, or concludes a distance or off-premises contract online¹.

Under the new Article 6a of Directive 98/6/EC, an announced reduction must state the prior price, being the lowest price the trader applied in a period of not less than 30 days before the reduction².
Under Article 6(1)(ea) of Directive 2011/83/EU, the trader must tell the consumer before the contract where the price was personalized on the basis of automated decision-making³.
The recitals make clear that real-time changes in response to market demand, without personalization, do not trigger that disclosure¹.

Unfair Commercial Practices Directive 2005/29/EC[^4]

Applies whenAny business-to-consumer commercial practice, including how prices are presented and targeted⁴.

Prices and price advantages must not be misleading by action or by omission⁴.
Practices that exploit a specific vulnerability or apply undue influence can be unfair even where each price shown is accurate⁴.

General Data Protection Regulation (EU) 2016/679[^5]

EU (and the UK GDPR in the UK)

Applies whenPersonal data is used to profile shoppers or to decide what price or offer each one sees⁵.

A lawful basis and transparent information about the profiling are required under Articles 6, 13 and 14⁵.
Article 22 restricts decisions based solely on automated processing that produce legal or similarly significant effects; a materially higher price for one person can fall within it⁵.

Digital Markets, Competition and Consumers Act 2024[^6]

Applies whenA trader engages in a commercial practice with consumers in the UK⁶.

Misleading actions and omissions of material information, including leaving unavoidable fees out of the headline price (drip pricing), are prohibited⁶.
The Competition and Markets Authority can investigate, decide infringements and impose monetary penalties directly rather than going through the courts⁶.

Price Marking Order 2004[^7]

Applies whenA trader indicates goods for sale to consumers⁷.

The selling price and, for most goods sold by quantity, the unit price must be shown in a way that is unambiguous, easily identifiable and clearly legible⁷.

New York General Business Law section 349-a (Algorithmic Pricing Disclosure Act)[^8]

US (New York)

Applies whenA price is set by an algorithm using personal data about the consumer and is offered to a New York consumer⁸.

The price must carry a clear and conspicuous statement that it was set by an algorithm using the consumer's personal data, in the wording the statute prescribes⁸.
Insurers, financial institutions covered by federal financial privacy law and certain subscription prices are exempt; the Attorney General enforces it with civil penalties per violation⁸.

Article 101 TFEU, as explained in the Commission's horizontal co-operation guidelines[^10]

Applies whenCompetitors use pricing algorithms that coordinate their prices or pool commercially sensitive information¹⁰.

Agreeing with competitors to use the same pricing algorithm or rule is treated like any other price-fixing agreement¹⁰.
Feeding rivals' confidential data into a common third-party pricing tool can amount to an unlawful information exchange (hub-and-spoke)¹⁰.

Four pricing practices across EU, UK and New York rules

How each practice is treated in broad terms. The detail sits in the instruments above.

Practice	EU	UK	New York
Same price for all, changing through the day	Allowed; announced discounts must use the 30-day prior price².	Allowed; reference prices must not mislead⁶.	Outside the disclosure duty if no personal data sets the price⁸.
Price differs by loyalty history or device	Disclose personalization online; GDPR profiling duties apply³.	UK GDPR profiling duties; unfair-practice rules on presentation⁶.	Statutory notice required next to the price⁸.
Personalized coupon, shelf price unchanged	Profiling and marketing-objection rights apply to the targeting⁵.	Same in substance under UK GDPR and direct-marketing rules.	Check with counsel whether the coupon price counts as set with personal data.
Fees added late in checkout	Misleading omission risk under the UCPD⁴.	Expressly targeted as drip pricing⁶.	General deceptive-practices law; outside the disclosure statute.

A blank answer in one market is not a green light: general consumer law still applies.

When a shared repricing tool becomes a competition problem

The competition question is not whether software sets your prices but what it knows. The European Commission's guidelines treat independent use of a pricing tool on public data as lawful in principle, while competitors agreeing on a common algorithm, or a provider pooling their confidential data into recommendations, can be unlawful¹⁰.

US enforcers take the same view. The Department of Justice's proposed settlement with a rental revenue-management software provider requires it to stop using competitors' nonpublic, competitively sensitive information to set prices at runtime¹¹. The case concerned housing, but the logic reaches any retail category where rivals buy the same repricing service.

Before buying a pricing tool, ask what data from other customers enters its models, whether recommendations ever draw on non-public rival prices or stock, and whether you can see and override every rule.

Guardrails to design into the pricing engine

Each item turns a legal requirement into something an engineer can build and an auditor can test.

0 of 7 checked

Price floors, ceilings and maximum change per periodHard limits by category stop runaway repricing and make discount claims defensible.
A rolling price ledger per item and channelStore every applied price so the EU prior-price figure for any discount claim is calculated, not estimated².
Protected and sensitive attributes excludedNo special-category data and no close proxies for it; test outputs for differences across customer groups.
A personalization flag on every price servedThe engine records whether personal data influenced the price, which drives EU disclosure and the New York notice automatically.
Explanation fieldsEach price change records the rule or model version and its main drivers, so service teams and regulators get an answer.
Approval for rule and model changesPricing, legal and data protection sign off new rules, data sources and segments before release.
A kill switch per marketReturn to list price in one action if a complaint, audit or rule change requires it.

A grocery app that personalizes coupons, not shelf prices

Price experiments and the legal review they need

A/B tests on price are personalization by another name: two shoppers see different prices for reasons unrelated to cost. Randomized tests avoid targeting personal traits, but still need a documented purpose, a fixed duration and a cap on the price gap.

Give legal review the hypothesis, the test cells and their price ranges, the markets covered, the assignment method and what shoppers are told. Tests randomized by store or region rather than by person often answer the same elasticity question with less exposure. US federal attention continues: FTC staff have published initial findings from a study of intermediaries selling personal-data-driven pricing tools⁹.

Questions and answers

Is surge pricing legal for retailers?

Generally yes, where every shopper sees the same price at the same moment and the price is shown clearly before purchase. The risks come from how changes are presented: discount claims must use a lawful reference price, mandatory fees must sit in the headline price, and rules on price gouging during declared emergencies, which exist in many US states, can cap increases on essential goods. Check those state rules separately.

Must we tell customers that a price is personalized?

In the EU, yes for online and other distance contracts where automated decision-making personalized the price, under Article 6(1)(ea) of the Consumer Rights Directive. In New York, prices set by an algorithm using personal data need the statutory notice. In the UK there is no equivalent specific disclosure rule, but UK GDPR transparency duties and the ban on misleading omissions still apply.

How long should we keep price history?

At a minimum, long enough to prove every reference price you display, which in the EU means each item's applied prices across the full look-back period before any announced reduction, per channel². Most retailers keep far longer histories for elasticity modeling and complaint handling, so agree a retention period with data protection colleagues where the history links prices to identifiable shoppers.

Sources

Directive (EU) 2019/2161 on the better enforcement and modernisation of Union consumer protection rules — EUR-Lex · checked 10 October 2026
Directive 98/6/EC on consumer protection in the indication of the prices of products offered to consumers — EUR-Lex · checked 10 October 2026
Directive 2011/83/EU on consumer rights — EUR-Lex · checked 10 October 2026
Directive 2005/29/EC concerning unfair business-to-consumer commercial practices — EUR-Lex · checked 10 October 2026
Regulation (EU) 2016/679 (General Data Protection Regulation) — EUR-Lex · checked 10 October 2026
Digital Markets, Competition and Consumers Act 2024 — legislation.gov.uk · checked 10 October 2026
The Price Marking Order 2004 — legislation.gov.uk · checked 10 October 2026
New York General Business Law section 349-a: algorithmic pricing disclosure — New York State Senate · checked 10 October 2026
Surveillance Pricing Update: The Work Ahead — Federal Trade Commission · checked 10 October 2026
Guidelines on the applicability of Article 101 TFEU to horizontal co-operation agreements — EUR-Lex · checked 10 October 2026
Justice Department requires RealPage to end the sharing of competitively sensitive information and alignment of pricing among competitors — US Department of Justice · checked 10 October 2026

More in Retail

Back to Retail

Next step

Have your pricing engine's guardrails reviewed before launch

Send a description of your pricing rules, the data that feeds them and the markets you sell in. We will reply with the guardrails and logging we would add, and the questions to take to your legal team.

Discuss pricing guardrails