California Moves Against Surveillance Pricing
Summary: California lawmakers are considering a bill that would prohibit surveillance pricing, a practice in which companies use personal data to offer different prices to different customers for the same product or service. The proposal focuses on a growing privacy risk: data collection is no longer only used for advertising and personalization, but increasingly for economic decisions that consumers may never see.
What changed?#
The Electronic Frontier Foundation (EFF) has endorsed California Senate Bill 2564, legislation aimed at banning surveillance pricing.
The proposal addresses a business practice in which companies analyze information such as browsing history, location data, purchasing behavior, and other personal signals to determine what price a specific customer may be willing to pay. Two people could see different prices for the same product despite shopping under otherwise similar conditions.
EFF points to findings discussed in a 2025 Federal Trade Commission report examining companies that provide surveillance-pricing services to retailers and other businesses. According to the report, pricing decisions can be informed by data collected directly by the seller, obtained from specialized analytics providers, or purchased from third-party data brokers.
The bill’s central argument is straightforward: if personal surveillance helps determine what a customer pays, privacy harms extend beyond advertising and into the transaction itself.
What is surveillance pricing?#
Surveillance pricing is the practice of adjusting prices using personal data about individual customers or customer segments.
Unlike traditional pricing strategies that respond to inventory levels, seasonal demand, or broad market conditions, surveillance pricing relies on information about the buyer. That information may include browsing activity, location history, prior purchases, loyalty program participation, or data acquired from brokers.
The key distinction is not merely that prices vary. Businesses have long used discounts, promotions, and dynamic pricing. The concern is that personal surveillance becomes an input into the price-setting process while remaining largely invisible to the customer.
Why does it matter for privacy?#
The privacy issue is not only data collection. It is how collected data changes outcomes.
For years, privacy debates focused heavily on targeted advertising. Surveillance pricing expands the consequences of tracking. Data that was originally gathered for marketing can potentially influence what products are offered, which discounts are shown, and what price a consumer ultimately pays.
This creates a stronger economic incentive to collect more information. If personal data directly affects revenue through pricing decisions, companies may have reasons to seek increasingly detailed behavioral profiles.
That connection is important for security operations and privacy professionals. Discussions about browser privacy, identity exposure, and data brokers often focus on who can see information. Surveillance pricing raises a different question: what decisions are being made because that information exists?
Privacy Risk Comparison#
| Model | Primary Data Use | Consumer Visibility | Main Risk |
|---|---|---|---|
| Traditional advertising | Show relevant ads | Moderate | Tracking and profiling |
| Personalized recommendations | Influence product discovery | Moderate | Behavioral manipulation |
| Surveillance pricing | Influence prices offered | Low | Unequal pricing and reduced transparency |
The lower the visibility of a decision, the harder it becomes for consumers to understand whether they are being treated differently.
What should readers check?#
The bill is still a legislative proposal, not a completed solution to broader data-collection practices.
Readers should avoid assuming that a surveillance-pricing ban would eliminate privacy risks associated with data brokers or behavioral tracking. Those systems would continue to exist unless addressed through separate laws or market changes.
Practical checks remain largely the same:
- Limit unnecessary data sharing with retailers and advertising networks.
- Review loyalty programs that collect detailed purchasing histories.
- Reduce browser-based tracking where possible.
- Understand which apps collect location data and whether that collection is necessary.
- Pay attention to services that combine information from multiple sources into consumer profiles.
These steps do not guarantee equal pricing, but they reduce the amount of information available for profiling.
Readers interested in broader trust and verification questions around data ecosystems may also find relevant lessons in GigaTap’s coverage of software transparency and operational trust:
- OpenSSF’s April signal: make security artifacts operational
- When F-Droid Misses Tags, Updates Go Dark
- 100% package test coverage is the point, not the slogan
Each highlights a similar theme: visibility matters. Systems become harder to evaluate when important decisions depend on information users cannot independently inspect.
What not to overclaim#
The available information does not establish how widespread surveillance pricing currently is across all industries. Nor does it prove that every form of price variation is driven by personal data.
Dynamic pricing, promotional discounts, inventory-based adjustments, and regional pricing can all exist without surveillance pricing.
The narrower claim supported by the discussion around S.B. 2564 is that personal data can be used as a pricing input and that lawmakers are increasingly treating that practice as a privacy problem rather than merely a marketing technique.
That shift may be the most important signal. Privacy regulation has traditionally focused on collection and disclosure. Surveillance pricing focuses attention on the downstream decisions made with that data.
FAQ#
Who should care about surveillance pricing?#
Anyone concerned about privacy, data brokers, identity exposure, or consumer transparency. The practice links personal profiling directly to economic outcomes rather than advertising alone.
Does a surveillance-pricing ban stop data collection?#
No. A ban on surveillance pricing would address one use of personal data. It would not automatically prevent tracking, profiling, or data brokerage activities unless those practices are restricted separately.