Who at a retail & e-commerce company should track these rules?

Retail GC, e-commerce trust-and-safety lead, or consumer-protection counsel is typically the role accountable for retail & e-commerce-AI compliance. AIGI is designed to put primary-source updates in front of this role daily.

How many retail & e-commerce AI items does AIGI track?

AIGI currently tracks 200 primary-source items where retail & e-commerce appears as an affected industry, spanning 8+ jurisdictions. The corpus is updated continuously.

Which jurisdictions are most active on retail & e-commerce AI?

Activity varies by sub-sector. AIGI's coverage map shows per-jurisdiction depth, and each item links to its primary authority source. See /coverage for the live distribution.

Where do AIGI's retail & e-commerce citations come from?

Every item on this page includes a direct link to the relevant government, regulator, or research document.

Industry · AI-powered consumer interactions, dynamic pricing, and recommendation transparency

AI Compliance for Retail & E-commerce

AI in retail covers AI-driven dynamic pricing fairness rules, mandatory disclosure of AI-generated product descriptions, deceptive-AI advertising under FTC and equivalents, AI in customer service and chatbots, and recommendation-engine transparency obligations. AIGI tracks every primary-source AI rule for retailers, marketplaces, and e-commerce platforms. As of the most recent update, AIGI tracks 200 primary-source items affecting retail & e-commerce.

Who tracks this?

Typically: Retail GC, e-commerce trust-and-safety lead, or consumer-protection counsel. AIGI is built to put primary-source AI updates affecting retail & e-commerce in front of this role daily — with citation chains, status timelines, and obligation mapping.

Coverage at a glance

Items tracked: 200
Jurisdictions: 8
Last update: 6/17/2026

Most active jurisdictions for retail & e-commerce AI

Recent retail & e-commerce AI activity

KR enforcement action enforcement 6/17/2026

The PIPC Sanctions Coupang and CFS for Data Breaches and Infringements on Privacy

South Korea's PIPC sanctioned Coupang and CFS with significant penalties for multiple violations of the Personal Information Protection Act, including a major data breach affecting 33 million users, insufficient security, delayed notifications, and undermining CPO independence.

Authority: Personal Information Protection Commission (South Korea)
EU agency report enforcement 7/19/2026

[EU Commission Press] Commission fines AliExpress €550 million for breaching the Digital Services Act

The European Commission fined AliExpress €550 million for failing to diligently assess and mitigate risks of illegal, unsafe, or counterfeit products under the Digital Services Act.

Authority: European Commission
EU news analysis enforcement 7/20/2026

[EU Commission Press] Daily News 20 / 07 / 2026

The European Commission fined AliExpress €550 million for breaching the Digital Services Act.

Authority: European Commission
EU enforcement action enforcement 5/28/2026

[EU Digital Strategy] Commission fines Temu €200 million for breaching the Digital Services Act

The European Commission fined Temu €200 million for breaching the Digital Services Act by failing to diligently assess systemic risks of illegal products and harm to EU consumers.

Authority: European AI Office
CA agency report enforcement 10/8/2025

[CA CPPA] Minnesota and New Hampshire Join Bipartisan Consortium as Privacy Collaboration Continues Growing Nationwide

Minnesota and New Hampshire join the Consortium of Privacy Regulators, expanding nationwide collaboration on state privacy law enforcement, while the CPPA announces recent enforcement actions and fines against multiple companies.

Authority: California Privacy Protection Agency
CA enforcement action enforcement 8/6/2025

[CA CPPA] Fortune 500 Company Faces Subpoena Enforcement Action

The California Privacy Protection Agency (CPPA) filed a judicial action to enforce an investigative subpoena against Tractor Supply Company for alleged CCPA violations regarding consumer opt-out rights.

Authority: California Privacy Protection Agency
CA agency report enforcement 11/19/2025

[CA CPPA] CalPrivacy Launches Data Broker Enforcement Strike Force

CalPrivacy launched a Data Broker Enforcement Strike Force to investigate privacy violations and enforce compliance with the CCPA and Delete Act, highlighting recent fines and upcoming deletion platform.

Authority: California Privacy Protection Agency
SE enforcement action enforcement 7/3/2025

[IMY] Administrative fines against Apoteket and Apohem for transferring personal data to Meta

The Swedish DPA (IMY) imposed administrative fines of SEK 37 million on Apoteket AB and SEK 8 million on Apohem AB for using Meta Pixel and transferring sensitive personal data to Meta without a valid legal basis.

Authority: IMY (Sweden)
CO legislation enacted 2/13/2026

[CO Legislature] HB26-1210Prohibit Surveillance Price & Wage Setting

Colorado HB26-1210 prohibits the use of AI-driven automated decision systems that rely on 'surveillance data' for individualized price or wage discrimination.

Authority: Colorado Legislature
EU enforcement action enforcement 7/20/2026

[EU Digital Strategy] Commission fines AliExpress €550 million for breaching the Digital Services Act

The European Commission has fined AliExpress €550 million for failing to diligently assess and mitigate risks of illegal, unsafe, or counterfeit products under the Digital Services Act.

Authority: European AI Office
KR enforcement action enforcement 7/15/2026

The PIPC Sanctions Three Businesses for Failures to Implement Safeguards Required under the PIPA

The South Korean Personal Information Protection Commission sanctioned three companies with over KRW 700 million in fines and publication orders for failing to implement adequate data protection safeguards under the PIPA, leading to data breaches.

Authority: Personal Information Protection Commission (South Korea)
FR guidance effective 7/7/2026

[CNIL] Géolocalisation et applications mobiles : quelles règles pour protéger les données des utilisateurs ?

France's CNIL reminds mobile app developers and data brokers of their obligations under GDPR regarding geolocation data collection, usage, and sharing, highlighting privacy risks and commercial exploitation.

Authority: CNIL

+ 188 more — start trial for full access.

Frequently asked questions

Which AI laws apply to retail & e-commerce?: AI in retail covers AI-driven dynamic pricing fairness rules, mandatory disclosure of AI-generated product descriptions, deceptive-AI advertising under FTC and equivalents, AI in customer service and chatbots, and recommendation-engine transparency obligations. AIGI tracks every primary-source AI rule for retailers, marketplaces, and e-commerce platforms.
Who at a retail & e-commerce company should track these rules?: Retail GC, e-commerce trust-and-safety lead, or consumer-protection counsel is typically the role accountable for retail & e-commerce-AI compliance. AIGI is designed to put primary-source updates in front of this role daily.
How many retail & e-commerce AI items does AIGI track?: AIGI currently tracks 200 primary-source items where retail & e-commerce appears as an affected industry, spanning 8+ jurisdictions. The corpus is updated continuously.
Which jurisdictions are most active on retail & e-commerce AI?: Activity varies by sub-sector. AIGI's coverage map shows per-jurisdiction depth, and each item links to its primary authority source. See /coverage for the live distribution.
Where do AIGI's retail & e-commerce citations come from?: Every item on this page includes a direct link to the relevant government, regulator, or research document.

Regulatory intelligence

Track AI-governance change affecting retail & e-commerce teams.

AIGI monitors cited regulatory change and delivers decision-ready analysis. It does not monitor customer AI systems or enforce policy.

Start a 14-day trial Explore the tracker

Important — about this brief

This brief is published by AIGI as a regulatory intelligence service. It contains general information about AI laws, regulations, enforcement actions, and policy signals across jurisdictions. It is not legal, compliance, audit, or risk-management advice; it does not establish an attorney-client, advisory, or fiduciary relationship; and it should not be relied upon as a substitute for professional counsel applied to specific facts and circumstances. Where the brief identifies “Issues for Review,” those are observations of questions a reader in a particular role might raise with their own legal, compliance, or risk function — not recommendations to act. AIGI expressly disclaims liability for actions taken or not taken in reliance on this brief. Subscribers in regulated industries should consult licensed professionals authorized to practice in their jurisdiction.

Terms and disclosures →