On April 28, 2026, Maryland Governor Moore signed HB 895 (the Protection From Predatory Pricing Act) into law, which will impose limitations on the use of personalized pricing in the food retail and grocery delivery context.  The law will go into effect on October 1, 2026.  As we have detailed in prior blog posts, there has been a wave of personalized pricing proposals at the state level, and the FTC is focusing attention on pricing in the grocery sector.

The law prohibits covered entities’ use of “dynamic pricing” to set higher prices for exempt food, unless consumers provide consent or another exception applies.  Additionally, the law prohibits the use of protected class data to offer, advertise, or sell a good or service to a consumer if certain conditions are met.  Specifically, the law includes the following key terms and concepts:

  • Covered Entities.  The law applies to both (1) merchants operating physical establishments of at least 15,000 square feet that sell food exempt from state taxes and (2) third‑party delivery service providers that facilitate as a consumer service the delivery of food that is exempt from state taxes to Maryland consumers. 
  • Restrictions on “Dynamic Pricing.”  The law regulates covered entities’ use of “dynamic pricing” for food that is exempt from state taxes.  The law defines “dynamic pricing” as the discriminatory practice of offering or setting a personalized price for a good or service that is specific to a consumer based on the consumer’s personal data, regardless of whether the seller collected or purchased the personal data.
  • Use of Protected Class Data.  The law also prohibits covered entities from using “protected class data” to “offer, advertise, or sell goods or services” where such use would result in withholding or denying an accommodation, advantage, or privilege provided to others.  “Protected class data” is defined to include information about an individual or group that, alone or in combination, directly or by implication identifies a characteristic protected from discrimination under state or federal laws.
  • Exemptions.  The law exempts promotional pricing, such as loyalty programs, benefits, and other “temporary discounts,” different prices due to subscription-based contracts or agreements, or where the consumer “consents to providing personal data or other information in exchange for obtaining the price.”
  • Enforcement.  The law provides a 45-day cure period and does not permit a private right of action.
Photo of Laura Kim Laura Kim

Laura Kim has a proven track record of successfully resolving clients’ most important consumer protection matters before the FTC, State AGs, and the NAD. She is well-known for her insider knowledge of the FTC as well as her practical approach to accomplishing her…

Laura Kim has a proven track record of successfully resolving clients’ most important consumer protection matters before the FTC, State AGs, and the NAD. She is well-known for her insider knowledge of the FTC as well as her practical approach to accomplishing her clients’ objectives.

As chair of Covington’s Advertising & Consumer Protection Investigations practice group, Laura represents corporate and individual clients in investigations before the FTC and State Attorneys General. She also provides pragmatic compliance advice on a wide range of consumer protection issues, including substantiating claims involving generative artificial intelligence, environmental benefits, and “Made in USA.” She counsels brands on emerging issues involving influencers, consumer reviews, AI-generated content, and subscription autorenewals. Laura regularly represents both challengers and advertisers before the NAD, achieving favorable outcomes in matters involving artificial intelligence, influencers, and claim substantiation.

During her twelve-year tenure at the FTC, Laura served as Assistant Director in two divisions of the Bureau of Consumer Protection, Attorney Advisor to Chairman William E. Kovacic, and Chief of Staff to Bureau Director Jessica Rich. She oversaw major rulemakings—including the Green Guides and the Telemarketing Sales Rule—and supervised dozens of investigations and enforcement actions. As Assistant Director in the Division of Enforcement, Laura also supervised compliance monitoring and enforcement proceedings for companies under federal court or Commission order.

Photo of Lindsey Tonsager Lindsey Tonsager

Lindsey Tonsager is a recognized leader in representing companies before federal and state regulators, and is renowned for advising on minor protection, AI, and state comprehensive privacy laws.

Lindsey chairs the firm’s global Data Privacy and Cybersecurity practice. She advises clients in their…

Lindsey Tonsager is a recognized leader in representing companies before federal and state regulators, and is renowned for advising on minor protection, AI, and state comprehensive privacy laws.

Lindsey chairs the firm’s global Data Privacy and Cybersecurity practice. She advises clients in their strategic and proactive engagement with the Federal Trade Commission, the U.S. Congress, the California Privacy Protection Agency, and State Attorneys General on proposed changes to data protection laws, and regularly represents clients in responding to investigations and enforcement actions involving their privacy and information security practices.

Lindsey’s practice focuses on helping clients launch new products and services that implicate the laws governing the use of artificial intelligence; data processing for robotics, autonomous vehicles, and other connected devices; biometrics; online advertising; the collection of personal information from children, teens, and students online; e-mail marketing; disclosures of video viewing information; and new technologies.

Lindsey also assesses privacy and data security risks in complex corporate transactions where personal data is a critical asset or data processing risks are otherwise material. In light of a dynamic regulatory environment where new state, federal, and international data protection laws are always on the horizon and enforcement priorities are shifting, she focuses on designing risk-based global privacy programs for clients that can keep pace with evolving legal requirements and efficiently leverage the clients’ existing privacy policies and practices. She conducts data protection assessments to benchmark against legal requirements and industry trends and proposes practical risk mitigation measures.

Photo of Jayne Ponder Jayne Ponder

Jayne Ponder counsels companies on the intersection of privacy, AI, and emerging technology regulation, and routinely represents clients in regulatory inquiries, investigations, and enforcement matters before federal and state agencies.

Jayne counsels clients across industries to launch and enhance products, services, and governance…

Jayne Ponder counsels companies on the intersection of privacy, AI, and emerging technology regulation, and routinely represents clients in regulatory inquiries, investigations, and enforcement matters before federal and state agencies.

Jayne counsels clients across industries to launch and enhance products, services, and governance programs involving their collection and use of data and emerging technologies. Her experience spans U.S. comprehensive privacy, automated decisionmaking, AI governance, biometric privacy, surveillance and algorithmic pricing, and AI transparency, disclosure, and safety frameworks. She partners with clients to design products and governance programs that keep pace with the dynamic regulatory environment, including in connection with digital and online advertising, social media, AI-powered and agentic services, connected devices, and robotics.

In addition, she advises companies on engagement with federal and state regulators, including through enforcement and rulemaking. Jayne analyzes privacy and security risks in complex corporate transactions. She also provides strategic input on the legislative, regulatory, and policy developments shaping the privacy and AI landscape.

Jayne maintains an active pro bono practice, focusing on assisting nonprofits with their privacy programs and elder estate planning.