By Malcolm Lee Kitchen III | Margin Of The Law
The End of the Uniform Price
There was a time when a price tag meant something fixed. A product sat on a shelf. It had a number attached to it. That number reflected what the seller needed to cover costs and turn a profit, adjusted loosely by what competitors were charging. You either paid it or you didn’t. The transaction was impersonal in the best sense: the price was the same for you as it was for the person standing next to you.
That model is functionally dead in digital commerce.
What replaced it is not simply “dynamic pricing,” the kind airlines and hotels have practiced for decades. Those systems adjusted prices based on aggregate demand signals: how many seats were left, how close the departure date was, how many people were searching for the same route. The inputs were market-level. The output applied to everyone looking at the same inventory at the same time.
Surveillance pricing operates on a different principle entirely. It adjusts the price based on you specifically: your location, your device, your browsing history, your demonstrated purchasing behavior, your inferred financial situation, and your predicted psychological response to price pressure. The item hasn’t changed. The market conditions haven’t changed. What changed is the algorithm’s read on how much you, in particular, are willing to pay before you walk away.
This is not an emerging trend. It is an established and expanding practice across retail, travel, insurance, and financial services. Understanding how it works, what it costs consumers beyond the transaction itself, and what tools exist to resist it is no longer optional knowledge for anyone who participates in digital commerce.
How the Profiling Pipeline Actually Works
Surveillance pricing requires data. Enormous, continuous, granular data collected from sources most consumers have never thought about and never explicitly agreed to provide.
The process begins with device fingerprinting. Before you’ve entered a search term or clicked a single link, the website you’ve loaded has already gathered a detailed technical profile of the machine you’re using: your operating system, your browser version, the resolution of your screen, the fonts installed on your device, the plugins running in your browser, and in some implementations, the current battery level of your phone or laptop. That last point is not incidental. Research and reporting from privacy analysts have confirmed that a low battery level is read by certain pricing algorithms as a behavioral signal. A device running low on power suggests a user who is mobile, likely in transit, potentially time-pressured, and less likely to comparison shop. The algorithm responds by presenting higher prices to that profile.
Geospatial tracking adds the next layer. Your IP address places you in a general region. GPS data from your phone places you with precision. Your home ZIP code, cross-referenced against census and consumer spending data, tells the platform what income bracket you likely occupy, what your commute looks like, and whether you live in an area with accessible retail alternatives. A consumer in a rural area with no nearby physical stores and limited transportation options presents a different pricing opportunity than a consumer in a dense urban center with multiple competitors within walking distance. The algorithm knows this. It prices accordingly.
Behavioral psychometrics track how you move through a digital environment. How long did you spend on the product page before scrolling down? Did you hover over the purchase button and then navigate away? How many times have you visited this listing in the past week? Did you compare this item across multiple tabs? Each of these micro-behaviors feeds into a model that estimates your level of interest, your price sensitivity, and your likelihood of completing the purchase at a given price point. The longer you’ve been circling a product, the more the data suggests commitment, and commitment is a signal to extract more before the transaction closes.
Predictive analytics reach further into your behavioral record to infer life circumstances you may not have disclosed anywhere. A pattern of browsing baby products alongside searches for pediatric health information suggests a recent or expected pregnancy. A history of searches combining job titles with resume-writing services suggests a career transition. A pattern of late-night browsing for urgent medical supplies suggests a health situation. These inferred states are not confirmed facts. But they don’t need to be. They’re probabilistic profiles, accurate enough at scale to adjust pricing toward consumers who are likely to be under time pressure, emotionally activated, or facing circumstances that reduce their capacity to delay a purchase and search for alternatives.
All of this data does not originate exclusively from the retailer’s own website. It arrives through a vast network of third-party data brokers, advertising technology companies, and data-sharing agreements between platforms. Your profile is assembled from fragments collected across dozens or hundreds of digital touchpoints and then sold or licensed to the retailer whose checkout page you’re currently viewing. The retailer does not need to have collected the data themselves. They simply need to purchase access to the profile.
First-Degree Price Discrimination: From Theory to Practice
Classical economics identified three degrees of price discrimination. Third-degree discrimination, the most common, segments consumers into broad groups (students, seniors, residents of specific regions) and prices accordingly. Second-degree discrimination adjusts prices based on quantity purchased or timing of purchase. First-degree discrimination, the theoretical limit of the practice, charges each individual consumer the absolute maximum they would be willing to pay before abandoning the transaction.
For most of economic history, first-degree price discrimination was considered an academic construct. It required perfect information about each individual consumer’s preferences, financial situation, and price sensitivity. No seller could realistically obtain that information at scale. The result was that prices, in most markets, settled somewhere below what many consumers would have been willing to pay, leaving what economists call “consumer surplus,” the difference between the price you paid and the maximum you would have accepted.
Surveillance pricing is the systematic elimination of that surplus.
The algorithm’s function is to solve for the highest price point at which the specific consumer completing this specific transaction will still proceed. Every data input narrows the range. Device type suggests income range. Location narrows it further. Browsing history establishes baseline price sensitivity. Time-on-page and return visit frequency signal urgency and commitment. The result is a price that, in theory, leaves no consumer surplus on the table. You pay exactly what you were going to pay anyway. The retailer captures everything.
This is not a future state. The Federal Trade Commission’s 2024 inquiries under Section 6(b) of the FTC Act targeted intermediary surveillance firms precisely because the data infrastructure enabling this practice is already mature and commercially deployed. The inquiry identified firms that operate as middlemen between consumer data sources and retail pricing engines, supplying the profiles that allow individualized extraction at scale. The FTC characterized the data practices of these firms as operating with minimal transparency and limited mechanisms for consumer awareness or consent.
The Regulatory Theater Problem
It is important to be precise about what regulatory inquiry is and what it isn’t. An inquiry is a data-gathering process. It asks companies to submit information. It produces reports. It may or may not lead to rulemaking. Rulemaking, if it occurs, may or may not produce enforceable standards. Enforceable standards, once established, require ongoing resources and political will to apply.
At each of those stages, the firms being investigated have legal teams, lobbying operations, and established relationships with the regulatory staff conducting the review. The revolving door between technology sector legal and policy roles and federal regulatory bodies is not a secret. It is documented, persistent, and structural. The people who built the data infrastructure and the people charged with evaluating it often share professional networks, prior employers, and sometimes career trajectories that move in both directions.
The Competition Bureau of Canada’s 2026 consultations on algorithmic and data-driven pricing represent a parallel process in a different jurisdiction, examining the same fundamental question: whether pricing systems that exploit individual consumer data profiles constitute a form of anti-competitive or deceptive trade practice. The fact that multiple regulatory bodies in multiple countries are asking the same questions simultaneously reflects the scale of the concern. It does not, by itself, constitute a solution.
The normalization problem compounds this. Consumer data collection is now embedded so deeply in the architecture of digital commerce that its removal would require either comprehensive legislative action or a fundamental shift in consumer behavior at scale. Neither is imminent. In the interim, the practice is described in terms designed to make it sound benign: “personalized pricing,” “dynamic offers,” “tailored experiences.” The language frames extraction as service. It works because most consumers lack the technical background to assess what is actually happening at the data layer of a transaction they experience only at the surface.
The Costs That Don’t Appear on the Receipt
The most visible consequence of surveillance pricing is paying more for a specific purchase than another consumer with a different data profile would pay for the same item. That cost is real and direct. The less visible costs operate at a systemic level and accumulate across populations over time.
Consumers in lower-income ZIP codes are demonstrably identified as such by geospatial data. The algorithm’s response to that identification can operate in two directions: inflating prices for consumers with fewer alternatives, or withholding discount offers that would be presented to consumers in higher-income areas with greater mobility and more competition for their spending. Either mechanism functions as a tax on economic disadvantage. The consumer who most needs the lower price is least likely to receive it, not because the retailer made a conscious discriminatory decision, but because the algorithm optimized for extraction within the constraints of each individual’s data profile.
The erosion of rational agency is harder to measure but equally significant. A pricing environment calibrated to individual psychological profiles is not a neutral market. It is a system designed to find and exploit the specific conditions under which each consumer is most likely to pay more than they otherwise would. Urgency signals, scarcity indicators, and behavioral triggers are not randomly distributed across a user interface. They are targeted. When the environment is continuously tuned to the identified vulnerabilities of the person looking at it, the concept of a free market transaction conducted between equal parties becomes difficult to defend.
The downstream use of consumer profiles extends well beyond retail pricing. The data assembled to calculate your willingness to pay for a household appliance is the same data, or data from the same sources, that informs credit scoring models, insurance risk assessments, and in some documented cases, employment screening processes. Proton Privacy’s 2026 analysis of device-specific data leverage documented how consumer profiles built for retail pricing applications circulate into adjacent data markets. The profile that gets you a higher price on a plane ticket is not siloed. It feeds a broader system of individual assessment that affects access to financial products and services with consequences far more significant than a retail transaction.
What Can Actually Be Done
Regulatory solutions are slow, structurally compromised, and uncertain. That assessment is not cynicism. It is an accurate description of how regulatory processes work against well-resourced industries with deep institutional access. Waiting for the FTC or any equivalent body to resolve this at the infrastructure level is not a strategy.
The practical response is individual and decentralized. It operates at the data collection layer, not the pricing layer, because that is where the leverage actually exists.
A VPN routes your traffic through a server in a location of your choice, masking both your IP address and the geospatial signal it carries. It does not make you invisible, but it breaks the direct link between your actual location and the data profile being assembled in real time. Combined with a privacy-focused browser that blocks third-party tracking scripts and fingerprinting attempts, it significantly degrades the quality of the data available to the pricing algorithm. Lower-quality data produces less precise pricing. That imprecision works in the consumer’s favor.
Browser hygiene matters at a granular level. Cookie permissions, script permissions, and the choice of search engine all affect what data is collected during a browsing session. Privacy-focused search engines do not log queries or associate search behavior with individual profiles. That removes a significant input from the behavioral psychometric layer of the profiling pipeline.
Cash transactions eliminate data collection at the point of sale entirely. Digital payment systems, loyalty programs, and retailer apps all function as data collection mechanisms attached to a payment convenience. The convenience is real. The cost is the behavioral and transactional record those systems generate. Cash transactions produce no record that can be aggregated, sold, or used to refine a pricing profile.
App permissions represent a category of data exposure most consumers have not systematically addressed. A significant portion of the behavioral and location data that feeds consumer profiles is collected not by browsers but by mobile applications operating in the background of a device. Auditing installed applications for location access, microphone access, and background data permissions, and revoking access that is not strictly necessary for core functionality, reduces the ambient data collection that occurs outside of active browsing sessions.
The framing of “free” services deserves examination rather than acceptance. Services provided without direct monetary cost are not free. They are funded by the data generated by their users. That data is the product being sold. Understanding this transaction does not require rejecting every free digital service, but it requires accurate accounting of what is actually being exchanged.
Where This Ends Without Intervention
Surveillance pricing is not a malfunction of digital commerce. It is the logical outcome of combining unlimited data collection with pricing systems designed to maximize extraction from individual consumers. The tools exist. The data exists. The economic incentive to deploy both is substantial and growing.
The consumer who has no awareness of these mechanics is not navigating a market. They are navigating an environment designed to find the maximum they will pay before they stop. The price they receive is not the fair market price. It is the calculated extraction price, specific to their profile, optimized in real time, and inaccessible to scrutiny because the algorithm that produced it is proprietary.
Economic freedom in a surveillance pricing environment requires deliberate action at the individual level. It requires understanding the data layer beneath the transaction, deploying tools that degrade the quality of the data collected, and making conscious decisions about which systems to participate in and on what terms.
The market will not self-correct. Regulators will not move faster than the infrastructure they are attempting to regulate. The only immediately available leverage is the refusal to be a legible data source, which is an exercise of the kind of consumer sovereignty that the current system is specifically designed to prevent.
That design is the problem. Naming it accurately is the starting point.
This paper is provided for informational and educational purposes only and does not constitute professional legal or financial advice. Consumers should conduct their own research and exercise independent judgment when evaluating digital commerce practices and privacy tools.
© 2026 – MK3 Law Group
For republication or citation, please credit this article with link attribution to marginofthelaw.com/.