The next wave of AI enforcement is not about chatbots. It's about price.
On January 8, 2026, the New York Attorney General's Office sent a formal information demand to Instacart, requesting detailed records about its pricing practices and compliance with the state's Algorithmic Pricing Disclosure Act. The letter followed a December 2025 report by Consumer Reports and Groundwork Collaborative alleging Instacart users were shown materially different prices for identical products at the same stores at the same time.
The AG's questions reach beyond Instacart's consumer-facing platform. They cover Eversight — Instacart's pricing experimentation platform — smart-cart technology, agreements with retailers and CPG brands, and the full scope of price-testing activity conducted on behalf of third parties.
This is the first major enforcement test of a category of state law that will reshape how brands set prices in 2026 and beyond.
What the New York law requires.
The Algorithmic Pricing Disclosure Act requires businesses to disclose, clearly and conspicuously, when an algorithm sets prices using a consumer's personal data. The disclosure must be present at the point of price display. Fine-print links and buried policy pages do not satisfy the statute. The AG's letter signals that prominence is the enforcement test.
The structure mirrors GDPR-era thinking applied to commerce: consumers have a right to know when their data is shaping the price they see.
Why this matters for every brand using dynamic pricing.
Algorithmic pricing tools are no longer niche. Meta, Google, Amazon, Shopify, and every major retail platform offer dynamic-pricing or personalized-discount capabilities. The vendor ecosystem includes Eversight, Pricefx, Vendavo, Revionics, and dozens of mid-market entrants. The CPG sector uses these tools to test promotional prices, run conjoint experiments, and optimize trade spend.
The New York AG's letter establishes three operating principles for brands:
Personalized pricing using consumer data triggers disclosure obligations — even when the personalization is incremental.
The platform offering the tool and the brand using the tool can both be inside the enforcement perimeter.
Disclosure prominence — not just presence — is the standard. Fine print does not satisfy.
The federal antitrust overlay.
State AG action is not the only pressure point. The DOJ and FTC have taken active positions in cases involving algorithmic pricing tools allegedly facilitating coordination among competitors. The theory: when multiple firms share competitively sensitive pricing data through a common AI platform, that platform can function as a "hub" in a hub-and-spoke conspiracy — and the firms become "spokes" exchanging information indirectly.
The doctrine is unsettled. Courts have reached different conclusions on whether per se or rule-of-reason analysis applies. What is settled: algorithmic pricing tools that share competitor data are now a defined litigation category. Private class actions are following the regulatory complaints.
The UK's Competition and Markets Authority flagged the same "hub-and-spoke" concern in a March 4, 2026 publication on AI and collusion. The pattern is converging across jurisdictions.
What brands should do now.
Map every consumer touchpoint where pricing is personalized using consumer data. Document what data inputs drive what price outputs.
Audit disclosure prominence — not just disclosure presence. A link in your terms of service is not a disclosure for purposes of the New York law.
Review vendor contracts for indemnification language. If your dynamic pricing platform pools competitive data, your antitrust exposure is structural.
If you operate in New York or serve New York residents, assume jurisdiction unless legal can affirmatively rule it out.
Pre-build disclosure templates that can deploy across categories — grocery, apparel, travel, ticketing, ride-share — at scale.
The Instacart investigation is the opening shot. Other state AGs are watching. The CPG and retail platforms that solve disclosure architecture before the next AG letter lands will define the compliant standard. Everyone else will pay to catch up.
