On April 28, 2026, Maryland Governor Moore signed HB 895 (the Protection From Predatory Pricing Act) into law, which will impose limitations on the use of personalized pricing in the food retail and grocery delivery context.  The law will go into effect on October 1, 2026.  As we have detailed in prior blog posts, there has been a wave of personalized pricing proposals at the state level, and the FTC is focusing attention on pricing in the grocery sector.

The law prohibits covered entities’ use of “dynamic pricing” to set higher prices for exempt food, unless consumers provide consent or another exception applies.  Additionally, the law prohibits the use of protected class data to offer, advertise, or sell food or service to a consumer if certain conditions are met.  Specifically, the law includes the following key terms and concepts:

  • Covered Entities.  The law applies to both (1) merchants operating physical establishments of at least 15,000 square feet that sell food exempt from state taxes and (2) third‑party delivery service providers that facilitate as a consumer service the delivery of food that is exempt from state taxes to Maryland consumers. 
  • Restrictions on “Dynamic Pricing.”  The law regulates covered entities’ use of “dynamic pricing” for food that is exempt from state taxes.  The law defines “dynamic pricing” as the discriminatory practice of offering or setting a personalized price for a good or service that is specific to a consumer based on the consumer’s personal data, regardless of whether the seller collected or purchased the personal data.
  • Use of Protected Class Data.  The law also prohibits covered entities from using “protected class data” to “offer, advertise, or sell goods or services” where such use would result in withholding or denying an accommodation, advantage, or privilege provided to others.  “Protected class data” is defined to include information about an individual or group that, alone or in combination, directly or by implication identifies a characteristic protected from discrimination under state or federal laws.
  • Exemptions.  The law exempts promotional pricing, such as loyalty programs, benefits, and other “temporary discounts,” different prices due to subscription-based contracts or agreements, or where the consumer “consents to providing personal data or other information in exchange for obtaining the price.”
  • Enforcement.  The law provides a 45-day cure period and does not permit a private right of action.
Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Laura Kim Laura Kim

Laura Kim has a proven track record of successfully resolving clients’ most important consumer protection matters before the FTC, State AGs, and the NAD. She is well-known for her insider knowledge of the FTC as well as her practical approach to accomplishing her…

Laura Kim has a proven track record of successfully resolving clients’ most important consumer protection matters before the FTC, State AGs, and the NAD. She is well-known for her insider knowledge of the FTC as well as her practical approach to accomplishing her clients’ objectives.

As chair of Covington’s Advertising & Consumer Protection Investigations practice group, Laura represents corporate and individual clients in investigations before the FTC and State Attorneys General. She also provides pragmatic compliance advice on a wide range of consumer protection issues, including substantiating claims involving generative artificial intelligence, environmental benefits, and “Made in USA.” She counsels brands on emerging issues involving influencers, consumer reviews, AI-generated content, and subscription autorenewals. Laura regularly represents both challengers and advertisers before the NAD, achieving favorable outcomes in matters involving artificial intelligence, influencers, and claim substantiation.

During her twelve-year tenure at the FTC, Laura served as Assistant Director in two divisions of the Bureau of Consumer Protection, Attorney Advisor to Chairman William E. Kovacic, and Chief of Staff to Bureau Director Jessica Rich. She oversaw major rulemakings—including the Green Guides and the Telemarketing Sales Rule—and supervised dozens of investigations and enforcement actions. As Assistant Director in the Division of Enforcement, Laura also supervised compliance monitoring and enforcement proceedings for companies under federal court or Commission order.

Photo of Lindsey Tonsager Lindsey Tonsager

Lindsey Tonsager is a recognized leader in representing companies before federal and state regulators, and is renowned for advising on minor protection, AI, and state comprehensive privacy laws.

Lindsey chairs the firm’s global Data Privacy and Cybersecurity practice. She advises clients in their…

Lindsey Tonsager is a recognized leader in representing companies before federal and state regulators, and is renowned for advising on minor protection, AI, and state comprehensive privacy laws.

Lindsey chairs the firm’s global Data Privacy and Cybersecurity practice. She advises clients in their strategic and proactive engagement with the Federal Trade Commission, the U.S. Congress, the California Privacy Protection Agency, and State Attorneys General on proposed changes to data protection laws, and regularly represents clients in responding to investigations and enforcement actions involving their privacy and information security practices.

Lindsey’s practice focuses on helping clients launch new products and services that implicate the laws governing the use of artificial intelligence; data processing for robotics, autonomous vehicles, and other connected devices; biometrics; online advertising; the collection of personal information from children, teens, and students online; e-mail marketing; disclosures of video viewing information; and new technologies.

Lindsey also assesses privacy and data security risks in complex corporate transactions where personal data is a critical asset or data processing risks are otherwise material. In light of a dynamic regulatory environment where new state, federal, and international data protection laws are always on the horizon and enforcement priorities are shifting, she focuses on designing risk-based global privacy programs for clients that can keep pace with evolving legal requirements and efficiently leverage the clients’ existing privacy policies and practices. She conducts data protection assessments to benchmark against legal requirements and industry trends and proposes practical risk mitigation measures.

Photo of Jayne Ponder Jayne Ponder

Jayne Ponder provides strategic advice to national and multinational companies across industries on existing and emerging data privacy, cybersecurity, and artificial intelligence laws and regulations.

Jayne’s practice focuses on helping clients launch and improve products and services that involve laws governing data privacy…

Jayne Ponder provides strategic advice to national and multinational companies across industries on existing and emerging data privacy, cybersecurity, and artificial intelligence laws and regulations.

Jayne’s practice focuses on helping clients launch and improve products and services that involve laws governing data privacy, artificial intelligence, sensitive data and biometrics, marketing and online advertising, connected devices, and social media. For example, Jayne regularly advises clients on the California Consumer Privacy Act, Colorado AI Act, and the developing patchwork of U.S. state data privacy and artificial intelligence laws. She advises clients on drafting consumer notices, designing consent flows and consumer choices, drafting and negotiating commercial terms, building consumer rights processes, and undertaking data protection impact assessments. In addition, she routinely partners with clients on the development of risk-based privacy and artificial intelligence governance programs that reflect the dynamic regulatory environment and incorporate practical mitigation measures.

Jayne routinely represents clients in enforcement actions brought by the Federal Trade Commission and state attorneys general, particularly in areas related to data privacy, artificial intelligence, advertising, and cybersecurity. Additionally, she helps clients to advance advocacy in rulemaking processes led by federal and state regulators on data privacy, cybersecurity, and artificial intelligence topics.

As part of her practice, Jayne also advises companies on cybersecurity incident preparedness and response, including by drafting, revising, and testing incident response plans, conducting cybersecurity gap assessments, engaging vendors, and analyzing obligations under breach notification laws following an incident.

Jayne maintains an active pro bono practice, including assisting small and nonprofit entities with data privacy topics and elder estate planning.

Photo of Natalie Maas Natalie Maas

Natalie is an associate in the firm’s San Francisco office, where she is a member of the Food, Drug, and Device, and Data Privacy and Cybersecurity Practice Groups. She advises pharmaceutical, biotechnology, medical device, and food companies on a broad range of regulatory…

Natalie is an associate in the firm’s San Francisco office, where she is a member of the Food, Drug, and Device, and Data Privacy and Cybersecurity Practice Groups. She advises pharmaceutical, biotechnology, medical device, and food companies on a broad range of regulatory and compliance issues.

Natalie also maintains an active pro bono practice, with a particular focus on health care and reproductive rights.