Who at a retail & e-commerce company should track these rules?

Retail GC, e-commerce trust-and-safety lead, or consumer-protection counsel is typically the role accountable for retail & e-commerce-AI compliance. AIGI is designed to put primary-source updates in front of this role daily.

How many retail & e-commerce AI items does AIGI track?

AIGI currently tracks 172 primary-source items where retail & e-commerce appears as an affected industry, spanning 8+ jurisdictions. The corpus is updated continuously.

Which jurisdictions are most active on retail & e-commerce AI?

Activity varies by sub-sector. AIGI's coverage map shows per-jurisdiction depth, and each item links to its primary authority source. See /coverage for the live distribution.

Where do AIGI's retail & e-commerce citations come from?

Every item on this page links to its primary government, regulator, or research source. AIGI does not paraphrase secondary commentary — our citation methodology is documented at /how-we-cite.

Industry · AI-powered consumer interactions, dynamic pricing, and recommendation transparency

AI Compliance for Retail & E-commerce

AI in retail covers AI-driven dynamic pricing fairness rules, mandatory disclosure of AI-generated product descriptions, deceptive-AI advertising under FTC and equivalents, AI in customer service and chatbots, and recommendation-engine transparency obligations. AIGI tracks every primary-source AI rule for retailers, marketplaces, and e-commerce platforms. As of the most recent update, AIGI tracks 172 primary-source items affecting retail & e-commerce.

Who tracks this?

Typically: Retail GC, e-commerce trust-and-safety lead, or consumer-protection counsel. AIGI is built to put primary-source AI updates affecting retail & e-commerce in front of this role daily — with citation chains, status timelines, and obligation mapping.

Coverage at a glance

Items tracked: 172
Jurisdictions: 8
Last update: 6/17/2026

Most active jurisdictions for retail & e-commerce AI

Recent retail & e-commerce AI activity

KR enforcement action enforcement 6/17/2026

The PIPC Sanctions Coupang and CFS for Data Breaches and Infringements on Privacy

South Korea's PIPC sanctioned Coupang and CFS with significant penalties for multiple violations of the Personal Information Protection Act, including a major data breach affecting 33 million users, insufficient security, delayed notifications, and undermining CPO independence.

Authority: Personal Information Protection Commission (South Korea)
EU enforcement action enforcement 5/28/2026

[EU Digital Strategy] Commission fines Temu €200 million for breaching the Digital Services Act

The European Commission fined Temu €200 million for breaching the Digital Services Act by failing to diligently assess systemic risks of illegal products and harm to EU consumers.

Authority: European AI Office
CA agency report enforcement 10/8/2025

[CA CPPA] Minnesota and New Hampshire Join Bipartisan Consortium as Privacy Collaboration Continues Growing Nationwide

Minnesota and New Hampshire join the Consortium of Privacy Regulators, expanding nationwide collaboration on state privacy law enforcement, while the CPPA announces recent enforcement actions and fines against multiple companies.

Authority: California Privacy Protection Agency
CA enforcement action enforcement 8/6/2025

[CA CPPA] Fortune 500 Company Faces Subpoena Enforcement Action

The California Privacy Protection Agency (CPPA) filed a judicial action to enforce an investigative subpoena against Tractor Supply Company for alleged CCPA violations regarding consumer opt-out rights.

Authority: California Privacy Protection Agency
CA agency report enforcement 11/19/2025

[CA CPPA] CalPrivacy Launches Data Broker Enforcement Strike Force

CalPrivacy launched a Data Broker Enforcement Strike Force to investigate privacy violations and enforce compliance with the CCPA and Delete Act, highlighting recent fines and upcoming deletion platform.

Authority: California Privacy Protection Agency
SE enforcement action enforcement 7/3/2025

[IMY] Administrative fines against Apoteket and Apohem for transferring personal data to Meta

The Swedish DPA (IMY) imposed administrative fines of SEK 37 million on Apoteket AB and SEK 8 million on Apohem AB for using Meta Pixel and transferring sensitive personal data to Meta without a valid legal basis.

Authority: IMY (Sweden)
CO legislation enacted 2/13/2026

[CO Legislature] HB26-1210Prohibit Surveillance Price & Wage Setting

Colorado HB26-1210 prohibits the use of AI-driven automated decision systems that rely on 'surveillance data' for individualized price or wage discrimination.

Authority: Colorado Legislature
FR guidance effective 7/7/2026

[CNIL] Géolocalisation et applications mobiles : quelles règles pour protéger les données des utilisateurs ?

France's CNIL reminds mobile app developers and data brokers of their obligations under GDPR regarding geolocation data collection, usage, and sharing, highlighting privacy risks and commercial exploitation.

Authority: CNIL
JP regulation effective 6/12/2026

[METI] eBay Japan合同会社を「特定デジタルプラットフォームの透明性及び公正性の向上に関する法律」の規制対象事業者として指定しました

Japan's Ministry of Economy, Trade and Industry (METI) has designated eBay Japan G.K. as a regulated business under the Act on Improving Transparency and Fairness of Specific Digital Platforms.

Authority: Japan Ministry of Economy, Trade and Industry
SG guidance effective 1/22/2026

Singapore Launches New Model AI Governance Framework for Agentic AI

Singapore's IMDA launched the Model AI Governance Framework for Agentic AI, providing global guidance for responsible deployment, risk mitigation, and human accountability for AI agents.

Authority: Singapore Personal Data Protection Commission
NY legislation floor vote 12/19/2025

[NY Legislature] S8623 (2025-2026): Prohibits the use of surveillance pricing

New York bill S8623 proposes to prohibit the direct or indirect use of surveillance pricing and the collection, use, retention, or sharing of data to facilitate it.

Authority: New York Legislature
NY news analysis introduced 5/14/2026

[NYC Council] NYC Council Speaker Julie Menin and Majority Shaun Leader Abreu Introduce Legislation to Protect New Yorkers from Dynamic and Surveillance Pricing

New York City Council introduces two bills to ban surveillance pricing using personal data and restrict dynamic pricing in grocery stores.

Authority: New York City Council

+ 160 more — start trial for full access.

Frequently asked questions

Which AI laws apply to retail & e-commerce?: AI in retail covers AI-driven dynamic pricing fairness rules, mandatory disclosure of AI-generated product descriptions, deceptive-AI advertising under FTC and equivalents, AI in customer service and chatbots, and recommendation-engine transparency obligations. AIGI tracks every primary-source AI rule for retailers, marketplaces, and e-commerce platforms.
Who at a retail & e-commerce company should track these rules?: Retail GC, e-commerce trust-and-safety lead, or consumer-protection counsel is typically the role accountable for retail & e-commerce-AI compliance. AIGI is designed to put primary-source updates in front of this role daily.
How many retail & e-commerce AI items does AIGI track?: AIGI currently tracks 172 primary-source items where retail & e-commerce appears as an affected industry, spanning 8+ jurisdictions. The corpus is updated continuously.
Which jurisdictions are most active on retail & e-commerce AI?: Activity varies by sub-sector. AIGI's coverage map shows per-jurisdiction depth, and each item links to its primary authority source. See /coverage for the live distribution.
Where do AIGI's retail & e-commerce citations come from?: Every item on this page links to its primary government, regulator, or research source. AIGI does not paraphrase secondary commentary — our citation methodology is documented at /how-we-cite.

Stay informed

Daily briefs on retail & e-commerce AI compliance.

Start 14-day trial →

Important — about this brief

This brief is published by AIGI as a regulatory intelligence service. It contains general information about AI laws, regulations, enforcement actions, and policy signals across jurisdictions. It is not legal, compliance, audit, or risk-management advice; it does not establish an attorney-client, advisory, or fiduciary relationship; and it should not be relied upon as a substitute for professional counsel applied to specific facts and circumstances. Where the brief identifies “Issues for Review,” those are observations of questions a reader in a particular role might raise with their own legal, compliance, or risk function — not recommendations to act. AIGI expressly disclaims liability for actions taken or not taken in reliance on this brief. Subscribers in regulated industries should consult licensed professionals authorized to practice in their jurisdiction.

Full disclosures →