Today, October 1, the first state ban on surveillance pricing actually takes effect. After a year of bills and signatures, the theory becomes enforceable law — in Maryland. But what Maryland banned, and what it quietly left legal, is the real story.
🚦 Maryland is live — what's now illegal
As of today, food retailers over 15,000 sq ft and third-party delivery platforms in Maryland can no longer use a shopper's personal data to charge that person a higher individual price. Penalties run up to $10,000 per violation, and $25,000 for repeat offenders.
🕳️ The loopholes that survived
Maryland's law is the first — and deliberately narrow. What it does not do:
Loyalty programs are exempt — the single biggest carve-out, since that's where most data-driven pricing actually lives.
No private right of action — only the state Attorney General can enforce it; consumers can't sue.
A 45-day cure period — the AG must send a notice first, and if the company fixes the issue within 45 days, there's no enforcement.
It only restricts raising prices, not lowering them — personalized discounts stay legal.
Translation: if you run a loyalty program, Maryland probably doesn't touch you yet. But that gap is exactly what the next states are writing their laws to close.
🔭 Why the loopholes matter more than the ban
Consumer advocates publicly called Maryland's enforcement "weak." That's not a complaint — it's a roadmap. The states drafting next (California, Illinois, and others) are studying Maryland's carve-outs and writing tougher versions: private rights of action, no loyalty exemption, real teeth. Maryland is the prototype; the sequels will hit harder.
🌎 And it's crossing borders
Worth watching: Canada's Manitoba has banned algorithmic grocery pricing (Bill 49), with a federal push underway. Surveillance pricing is becoming a North America–wide issue, not just a U.S. state patchwork.
📋 The Statelex Watchlist
Maryland — 🟢 LIVE as of Oct 1, 2026. Food retailers 15,000+ sq ft & delivery; AG-only enforcement; loyalty carve-out.
New Jersey — 🔴 Enacted; effective Aug 1, 2027. Groceries; first with a consumer right to sue; up to $50K per violation; also freezes new electronic shelf labels for a year.
Connecticut — 🔴 Enacted; effective July 1, 2027.
California — 🟡 Partial: restricts competitor-data pricing tools; a broader consumer-data ban (AB 2564) still moving.
New York — 🟡 Disclosure law in effect since 2025; the fuller One Fair Price Act has passed the legislature but is not yet law.
The takeaway this week
The first ban is real — but built with the industry's fingerprints all over its exemptions. If you're a covered Maryland food retailer, the compliance question is live today. For everyone else, Maryland is a preview: watch which loopholes your state's bill closes, because that's where your real exposure will be.
Statelex is an information service, not legal advice. This dispatch summarizes public legislative and regulatory text; it does not evaluate whether your specific pricing practices comply with any law. Confirm any action with your legal or compliance team.