The Price is Right: Responsible Uses of Personal Data in Pricing
This resource provides an overview of how data is used to inform pricing; contextualizes data-driven pricing in existing U.S. law, enforcement activity, and emerging legislation; and recommends a number of best practices for guiding retail and e-commerce platforms in using data responsibly when it affects pricing. These practical recommendations, developed in consultation with companies working to […]
The Price is Right: Responsible Uses of Personal Data in Pricing
The way prices are set is changing: more accessible data, sophisticated algorithms, and ubiquitous online shopping have given retailers the ability to automatically tailor offers to customers in real-time or near-real-time based on increasing amounts of data about markets and consumers. A number of pricing strategies involving personal data, market data, and advanced machine learning—what […]
FPF Data-Driven Pricing – The Price is Right Report
The Price is Right Responsible Uses of Personal Data in Pricing APRIL 2026 The Future of Privacy Forum (FPF) is a non-profit organization that serves as a catalyst for privacy leadership and scholarship, advancing principled data practices in support of emerging technologies. Learn more about FPF by visiting fpf.org. Jameson Spivack Deputy Director for Artificial […]
Red Lines under the EU AI Act: Restricting Real-time Remote Biometric Identification Systems for Law Enforcement Purposes
[…] forth in Article 5. Article 3(41) of the AI Act defines an RBI system as an “AI system for the purpose of identifying natural persons, without their active involvement, typically at a distance through the comparison of a person’s biometric data with the biometric data contained in a reference database.” Whether a system qualifies […]
The Rest of the West: Oregon and Washington Build on California Chatbot Law
[…] expressing distress. But the law does not define what that “intervention” entails, leaving open whether operators are expected to go beyond providing resources and take a more active role in mitigating harm. This ambiguity is notable in light of prior legislative proposals. For example, earlier (un-enacted) legislation in Virginia (SB 796) would have required […]
Comparison Chart_ Chatbot Laws, Oregon’s SB 1546, Washington’s HB 2225, and California’s SB 243
C om paris o n of Chatb ot La w s: Ore g on’s SB 15 46 , Wash in gto n’s HB 22 25 , an d Cali f o rn ia ’s SB 24 3 C re ate d by: Ju stin e Glu ck , AI Polic y Analy st O ve […]
Red Lines under the EU AI Act: Understanding the prohibition of biometric categorization for certain sensitive characteristics
Blog 7 | Red Lines under the EU AI Act Series This blog is the seventh of a series that explores prohibited AI practices under the EU AI Act and their interplay with existing EU law. You can find the whole series here. The EU AI Act provides for rules on prohibited AI practices that the […]
Red Lines under EU AI Act: Unpacking the prohibition of emotion recognition in the workplace and education institutions
[…] of ‘intention’ to commit an action in the future but it might also be considered as an identification of the transition from a passive state (emotions) to active (a combination of emotions and intentions), making it difficult to understand whether such a prediction falls within the prohibition. The Guidelines, however, do not seem to […]
Privacy Protections Coming Sooner Rather Than Later to the Sooner State
Oklahoma has become the latest U.S. state to enact a comprehensive consumer privacy law after Governor Stitt signed SB 546 into law on March 20. This ends two long legislative droughts: First, this is the long-awaited 20th state comprehensive privacy law and the first since the Rhode Island Data Transparency and Privacy Protection Act was […]
Incentives or Obligations? The U.S. Regulatory Approach to Voluntary AI Governance Standards
[…] looked favorably on adherence to industry standards when determining if the defendant acted in good faith; however, there have been exceptions: A manufacturer followed industry standards but actively resisted safer designs based on economic considerations.11 A company followed industry standards but knew about a remaining risk and failed to warn and remedy the risk.12 […]