The FTC Wants Apps to Admit They Price You Off Your Data. Your Car Insurer Is Exempt, Because You Can Already Ask.

Your car insurance premium is assembled out of data about you. You knew that. What you may not know is that you can make the company itemize it. Hardly anybody does.

The Federal Trade Commission has spent the last three weeks arguing about exactly this, for everyone except you.

On August 19 the FTC put out a proposed enforcement policy statement on what it calls personalized pricing: using someone’s personal data to set a price based on “the amount that a company believes an individual consumer is willing to spend,” or on whether that person “is likely to engage in comparison shopping.” Where you’d reasonably expect a posted price to be the same for everybody, the FTC’s position is that hiding the personalization is probably illegal under Section 5.

Two of the examples it gives. A food delivery company charging more to people whose data suggests they can’t leave the house to buy food. A grocery chain charging a delivery customer more for milk “based on data showing that several children live in the customer’s household.”

Then the carveout. Insurance and credit are out, and the stated reason is honest: those prices “necessarily turn on a consumer’s individualized characteristics and details so that they properly reflect the risk.” Your premium is supposed to be personal. That’s the product.

Here’s what they don’t tell you

Read how the FTC justifies the retail rule and you find your own industry cited as the model. The Commission leans on the Fair Credit Reporting Act’s adverse action notices and on “many state laws regulating the insurance industry” that already force disclosure of the basis for an individualized decision. It names three in a footnote: California Insurance Code 791.02 and 791.10, Virginia Code 38.2-602, Washington Administrative Code 284-30A.

Why does the FTC think disclosure matters?

Its own words: it improves your ability to “dispute or correct inaccurate information collected about them that is leading to higher prices.”

The protection shoppers are fighting for now, drivers have had for decades. The FCRA counts “an increase in any charge for” insurance as an adverse action. California goes further: for auto policies, written reasons come at the time of the decision, no request needed, and if you send a written request within 90 business days the insurer has 21 business days to produce the reasons, the personal information behind them, and the names and addresses of whoever supplied it.

Names and addresses of the sources. That is a serious right, sitting unused.

Do this now

Pull your last renewal notice and find the increase. Send your insurer a written request for the specific reasons and the data behind them, and ask which outside reports were used. If a consumer report was part of it, demand your free copy and read it for claims and accidents that aren’t yours. Wrong data in a file is the cheapest premium cut there is, and it’s the one the FTC says disclosure exists to catch.

Then shop the policy anyway. Start with our auto insurance picks and the auto insurance hub, because a corrected file is only worth what a competing carrier will quote on it.

Think insurers should have to show their pricing data the way the FTC wants grocery apps to? The comment window is open until September 25, docket FTC-2026-1057.

The fine print

This is a policy statement, not a regulation. It creates no obligation on its own, it signals where enforcement dollars go. The Commission also declined to say whether some personalized pricing is unfair even when fully disclosed, leaving the harder question for later.

How Candid Yak makes money. Some of the products we write about pay us if you apply or sign up through our links. That never changes our verdict, our rankings, or the numbers in this article. We call a bad deal a bad deal whether it pays us or not. Some brands shown in our comparison tools are placeholder examples while we finalize partner agreements, and we label them as such.