Three states—Maryland, Connecticut, and New Jersey—have enacted laws banning or restricting companies from using personal data for personalized pricing, with the FTC signaling potential enforcement and other states likely to follow. While these laws share the goal of regulating surveillance pricing, they differ significantly in their definitions, scope, covered entities, permitted exceptions, and enforcement mechanisms, creating a complex patchwork of requirements for businesses to navigate.
Three states—Maryland, Connecticut, and New Jersey—have enacted laws banning or restricting companies from using personal data for personalized pricing, with the FTC signaling potential enforcement and other states likely to follow. While these laws share the goal of regulating surveillance pricing, they differ significantly in their definitions, scope, covered entities, permitted exceptions, and enforcement mechanisms, creating a complex patchwork of requirements for businesses to navigate.

